Charge

Charge

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
  "binding_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
  "merchant_reference": "ref-123456",
  "amount": 10000,
  "currency": "IDR",
  "description": "Description of the charge"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge"

payload = {
    "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "binding_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "merchant_reference": "ref-123456",
    "amount": 10000,
    "currency": "IDR",
    "description": "Description of the charge"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_id: '01HZX9JK4M5N6P7Q8R9STUVWXY',
    binding_id: '01HZX9JK4M5N6P7Q8R9STUVWXY',
    merchant_reference: 'ref-123456',
    amount: 10000,
    currency: 'IDR',
    description: 'Description of the charge'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_id' => '01HZX9JK4M5N6P7Q8R9STUVWXY',
    'binding_id' => '01HZX9JK4M5N6P7Q8R9STUVWXY',
    'merchant_reference' => 'ref-123456',
    'amount' => 10000,
    'currency' => 'IDR',
    'description' => 'Description of the charge'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge"

	payload := strings.NewReader("{\n  \"account_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"binding_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"merchant_reference\": \"ref-123456\",\n  \"amount\": 10000,\n  \"currency\": \"IDR\",\n  \"description\": \"Description of the charge\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"binding_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"merchant_reference\": \"ref-123456\",\n  \"amount\": 10000,\n  \"currency\": \"IDR\",\n  \"description\": \"Description of the charge\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"binding_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"merchant_reference\": \"ref-123456\",\n  \"amount\": 10000,\n  \"currency\": \"IDR\",\n  \"description\": \"Description of the charge\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "7c2e1a4b-9d6f-4e3a-8b1c-2d4f9a1c5b3e",
    "binding_id": "9a1c5b3e-2d4f-4d8c-93cf-9a1c5b3e2d4f",
    "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "merchant_reference": "INV-2026-0001",
    "amount": 150000,
    "currency": "IDR",
    "description": "Subscription June 2026",
    "status": "PENDING",
    "requires_otp": false,
    "paid_at": null,
    "failure_code": null,
    "failure_reason": null,
    "web_redirect_url": null,
    "created_at": "2026-06-04T08:30:01+07:00",
    "updated_at": "2026-06-04T08:30:01+07:00"
  }
}

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "7c2e1a4b-9d6f-4e3a-8b1c-2d4f9a1c5b3e",
    "binding_id": "9a1c5b3e-2d4f-4d8c-93cf-9a1c5b3e2d4f",
    "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "merchant_reference": "INV-2026-0001",
    "amount": 150000,
    "currency": "IDR",
    "description": "Subscription June 2026",
    "status": "PENDING_OTP",
    "requires_otp": true,
    "paid_at": null,
    "failure_code": null,
    "failure_reason": null,
    "web_redirect_url": null,
    "created_at": "2026-06-04T08:30:01+07:00",
    "updated_at": "2026-06-04T08:30:01+07:00"
  }
}

{
  "response_code": "SP001",
  "response_message": "Transaction Failure",
  "data": null
}

{
  "response_code": "4019900",
  "response_message": "Signature verification failed",
  "data": null
}

{
  "response_code": "SP015",
  "response_message": "Forbidden",
  "data": null
}

{
  "response_code": "SP020",
  "response_message": "Merchant Account Not Found",
  "data": null
}

{
  "response_code": "SP004",
  "response_message": "Duplicate Reference Number",
  "data": {
    "transaction_id": "7c2e1a4b-9d6f-4e3a-8b1c-2d4f9a1c5b3e"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "errors": {
      "amount": [
        "Min amount is Rp. 10.000."
      ]
    }
  }
}

{
  "response_code": "SP002",
  "response_message": "General Failure",
  "data": null
}

POST

api

v2.0

direct-debit

charge

Charge

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
  "binding_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
  "merchant_reference": "ref-123456",
  "amount": 10000,
  "currency": "IDR",
  "description": "Description of the charge"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge"

payload = {
    "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "binding_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "merchant_reference": "ref-123456",
    "amount": 10000,
    "currency": "IDR",
    "description": "Description of the charge"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_id: '01HZX9JK4M5N6P7Q8R9STUVWXY',
    binding_id: '01HZX9JK4M5N6P7Q8R9STUVWXY',
    merchant_reference: 'ref-123456',
    amount: 10000,
    currency: 'IDR',
    description: 'Description of the charge'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_id' => '01HZX9JK4M5N6P7Q8R9STUVWXY',
    'binding_id' => '01HZX9JK4M5N6P7Q8R9STUVWXY',
    'merchant_reference' => 'ref-123456',
    'amount' => 10000,
    'currency' => 'IDR',
    'description' => 'Description of the charge'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge"

	payload := strings.NewReader("{\n  \"account_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"binding_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"merchant_reference\": \"ref-123456\",\n  \"amount\": 10000,\n  \"currency\": \"IDR\",\n  \"description\": \"Description of the charge\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"binding_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"merchant_reference\": \"ref-123456\",\n  \"amount\": 10000,\n  \"currency\": \"IDR\",\n  \"description\": \"Description of the charge\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v2.0/direct-debit/charge")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"binding_id\": \"01HZX9JK4M5N6P7Q8R9STUVWXY\",\n  \"merchant_reference\": \"ref-123456\",\n  \"amount\": 10000,\n  \"currency\": \"IDR\",\n  \"description\": \"Description of the charge\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "7c2e1a4b-9d6f-4e3a-8b1c-2d4f9a1c5b3e",
    "binding_id": "9a1c5b3e-2d4f-4d8c-93cf-9a1c5b3e2d4f",
    "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "merchant_reference": "INV-2026-0001",
    "amount": 150000,
    "currency": "IDR",
    "description": "Subscription June 2026",
    "status": "PENDING",
    "requires_otp": false,
    "paid_at": null,
    "failure_code": null,
    "failure_reason": null,
    "web_redirect_url": null,
    "created_at": "2026-06-04T08:30:01+07:00",
    "updated_at": "2026-06-04T08:30:01+07:00"
  }
}

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "7c2e1a4b-9d6f-4e3a-8b1c-2d4f9a1c5b3e",
    "binding_id": "9a1c5b3e-2d4f-4d8c-93cf-9a1c5b3e2d4f",
    "account_id": "01HZX9JK4M5N6P7Q8R9STUVWXY",
    "merchant_reference": "INV-2026-0001",
    "amount": 150000,
    "currency": "IDR",
    "description": "Subscription June 2026",
    "status": "PENDING_OTP",
    "requires_otp": true,
    "paid_at": null,
    "failure_code": null,
    "failure_reason": null,
    "web_redirect_url": null,
    "created_at": "2026-06-04T08:30:01+07:00",
    "updated_at": "2026-06-04T08:30:01+07:00"
  }
}

{
  "response_code": "SP001",
  "response_message": "Transaction Failure",
  "data": null
}

{
  "response_code": "4019900",
  "response_message": "Signature verification failed",
  "data": null
}

{
  "response_code": "SP015",
  "response_message": "Forbidden",
  "data": null
}

{
  "response_code": "SP020",
  "response_message": "Merchant Account Not Found",
  "data": null
}

{
  "response_code": "SP004",
  "response_message": "Duplicate Reference Number",
  "data": {
    "transaction_id": "7c2e1a4b-9d6f-4e3a-8b1c-2d4f9a1c5b3e"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "errors": {
      "amount": [
        "Min amount is Rp. 10.000."
      ]
    }
  }
}

{
  "response_code": "SP002",
  "response_message": "General Failure",
  "data": null
}

Authorizations

Authorization

string

header

required

JWT issued by POST /api/v1.1/access-token/b2b. Send Authorization: Bearer <token>.

X-PARTNER-ID

string

header

required

Merchant API key (Credential.api_key). Required on every request.

Headers

X-Signature

string

required

HMAC-SHA512 hex signature, computed as HMAC_SHA512(clientSecret, "{HTTP_METHOD}:{REQUEST_URI}:{ACCESS_TOKEN}:{SHA256_HEX(MINIFIED_BODY)}:{X_TIMESTAMP}"). MINIFIED_BODY is the request body with object keys recursively sorted alphabetically and re-serialised with no whitespace (an empty/missing body hashes the empty string). ACCESS_TOKEN is the bearer token without the Bearer prefix. Signature mismatch returns 401 with response_code=4019900.

X-Timestamp

string<date-time>

required

ISO-8601 timestamp of the request; used as part of the signed string and rejected by the gateway if more than ±5 minutes off the server clock.

Body

application/json

Pulls funds from an active binding into the merchant settlement account identified by account_id. The binding must be ACTIVE. merchant_reference is an idempotency key; replaying the same value returns 409 SP004 with the original transaction_id in data.

account_id

string

required

ULID of the merchant settlement account that should receive the funds. Must be owned by the authenticated merchant; access policy on the account is also enforced.

Example:

"01HZX9JK4M5N6P7Q8R9STUVWXY"

binding_id

string<uuid>

required

UUID of an ACTIVE DirectDebitBinding owned by the merchant.

Example:

"01HZX9JK4M5N6P7Q8R9STUVWXY"

merchant_reference

string

required

Merchant-side unique idempotency key for this charge.

Maximum string length: 100

Example:

"ref-123456"

amount

number

required

Amount to debit, in the unit of currency. Minimum 10,000 IDR (Ayoconnect Direct Debit floor).

Required range: x >= 10000

Example:

10000

currency

string | null

ISO-4217. Defaults to IDR (the only value supported by Direct Debit).

Required string length: 3

Example:

"IDR"

description

string | null

Customer-facing description for this charge. This value is stored with the transaction and may appear in reports.

Maximum string length: 512

Example:

"Description of the charge"

Response

SP000 Successfully. data matches DirectDebitTransactionData with status=PENDING (await settlement webhook) or status=SUCCESS on synchronous approval. fees are present only on SUCCESS.

SingaPay Merchant API v2 custom response envelope (ApiResponderHelper::responseJson, ApiResponseTrait). Business outcome is determined by response_code (SP000–SP020), not by HTTP status alone. On success (SP000), data holds the operation payload. On errors, data often includes a message and may echo request fields.

response_code

string

required

SingaPay custom business response code.

Example:

"SP000"

response_message

string

required

Human-readable label paired with response_code.

Example:

"Successfully"

data

object | null

Endpoint-specific payload on success, or error context (validation message, inquiry result with status invalid, etc.).

Getting Started

Security

Accept Money

Send Money

Transaction Records

Money Accounts

Webhook

Authorizations

Headers

Body

Response