Disburse Transfer

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "account_id": "01K946KF851RK7FX075GJHBVKF",
  "reference_number": "REF-20260610-001",
  "bank_code": "002",
  "bank_account_number": "1234567890000",
  "amount": 50000,
  "notes": "Transfer payment"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer"

payload = {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "bank_code": "002",
    "bank_account_number": "1234567890000",
    "amount": 50000,
    "notes": "Transfer payment"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_id: '01K946KF851RK7FX075GJHBVKF',
    reference_number: 'REF-20260610-001',
    bank_code: '002',
    bank_account_number: '1234567890000',
    amount: 50000,
    notes: 'Transfer payment'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_id' => '01K946KF851RK7FX075GJHBVKF',
    'reference_number' => 'REF-20260610-001',
    'bank_code' => '002',
    'bank_account_number' => '1234567890000',
    'amount' => 50000,
    'notes' => 'Transfer payment'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer"

	payload := strings.NewReader("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"bank_code\": \"002\",\n  \"bank_account_number\": \"1234567890000\",\n  \"amount\": 50000,\n  \"notes\": \"Transfer payment\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"bank_code\": \"002\",\n  \"bank_account_number\": \"1234567890000\",\n  \"amount\": 50000,\n  \"notes\": \"Transfer payment\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"bank_code\": \"002\",\n  \"bank_account_number\": \"1234567890000\",\n  \"amount\": 50000,\n  \"notes\": \"Transfer payment\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "101222025122910292195055674",
    "reference_number": "11111111118",
    "transaction_status": {
      "code": "00",
      "desc": "Success"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "1766978962000",
    "bank": {
      "code": "002",
      "name": "BRI",
      "account_name": "Dummy Test Account Internal",
      "account_number": "11111111118"
    },
    "gross_amount": {
      "currency": "IDR",
      "value": "12504.00"
    },
    "fee": {
      "currency": "IDR",
      "value": "2500"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "10004.00"
    },
    "balance_after": {
      "currency": "IDR",
      "value": "829988"
    },
    "notes": "test transfer"
  }
}

{
  "response_code": "SP004",
  "response_message": "Duplicate Reference Number",
  "data": {
    "account_id": "01K5G4FZZ18DMK0M5QTR8Y9QY9",
    "reference_number": "11111111118",
    "amount": 61000,
    "notes": "beli ketoprak",
    "bank_code": "BRINIDJA",
    "bank_account_number": "11111111118",
    "message": "Duplicate reference number"
  }
}

{
  "response_code": "4019900",
  "response_message": "Unauthorized. Invalid X-SIGNATURE",
  "data": null
}

{
  "response_code": "SP003",
  "response_message": "Insufficient Balance",
  "data": {
    "transaction_id": "101222025122910292195055674",
    "reference_number": "11111111118",
    "transaction_status": {
      "code": "06",
      "desc": "Failed"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "1766978962000",
    "bank": {
      "code": "002",
      "name": "BRI",
      "account_name": "Bambang",
      "account_number": "1231234"
    },
    "gross_amount": {
      "currency": "IDR",
      "value": "61000.00"
    },
    "fee": {
      "currency": "IDR",
      "value": "0.00"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "61000.00"
    },
    "balance_after": {
      "currency": "IDR",
      "value": "0.00"
    },
    "notes": "beli ketoprak"
  }
}

{
  "response_code": "SP020",
  "response_message": "Merchant Account Not Found",
  "data": {
    "account_id": "01K5G4FZZ18DMK0M5QTR8Y9QY9",
    "message": "Merchant Account ID Not Found",
    "reference_number": "11111111118",
    "amount": 61000,
    "notes": "beli ketoprak",
    "bank_code": "BRINIDJA",
    "bank_account_number": "11111111118"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "account_id": "01K5G4FZZ18DMK0M5QTR8Y9QY9",
    "reference_number": "11111111118",
    "amount": 61000,
    "notes": "beli ketoprak",
    "bank_code": null,
    "bank_account_number": "11111111118",
    "message": "Validation error `bank_code`: `The bank code field is required.`"
  }
}

POST

api

v2.0

disbursement

transfer

Disburse Transfer

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "account_id": "01K946KF851RK7FX075GJHBVKF",
  "reference_number": "REF-20260610-001",
  "bank_code": "002",
  "bank_account_number": "1234567890000",
  "amount": 50000,
  "notes": "Transfer payment"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer"

payload = {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "bank_code": "002",
    "bank_account_number": "1234567890000",
    "amount": 50000,
    "notes": "Transfer payment"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_id: '01K946KF851RK7FX075GJHBVKF',
    reference_number: 'REF-20260610-001',
    bank_code: '002',
    bank_account_number: '1234567890000',
    amount: 50000,
    notes: 'Transfer payment'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_id' => '01K946KF851RK7FX075GJHBVKF',
    'reference_number' => 'REF-20260610-001',
    'bank_code' => '002',
    'bank_account_number' => '1234567890000',
    'amount' => 50000,
    'notes' => 'Transfer payment'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer"

	payload := strings.NewReader("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"bank_code\": \"002\",\n  \"bank_account_number\": \"1234567890000\",\n  \"amount\": 50000,\n  \"notes\": \"Transfer payment\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"bank_code\": \"002\",\n  \"bank_account_number\": \"1234567890000\",\n  \"amount\": 50000,\n  \"notes\": \"Transfer payment\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v2.0/disbursement/transfer")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"bank_code\": \"002\",\n  \"bank_account_number\": \"1234567890000\",\n  \"amount\": 50000,\n  \"notes\": \"Transfer payment\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "101222025122910292195055674",
    "reference_number": "11111111118",
    "transaction_status": {
      "code": "00",
      "desc": "Success"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "1766978962000",
    "bank": {
      "code": "002",
      "name": "BRI",
      "account_name": "Dummy Test Account Internal",
      "account_number": "11111111118"
    },
    "gross_amount": {
      "currency": "IDR",
      "value": "12504.00"
    },
    "fee": {
      "currency": "IDR",
      "value": "2500"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "10004.00"
    },
    "balance_after": {
      "currency": "IDR",
      "value": "829988"
    },
    "notes": "test transfer"
  }
}

{
  "response_code": "SP004",
  "response_message": "Duplicate Reference Number",
  "data": {
    "account_id": "01K5G4FZZ18DMK0M5QTR8Y9QY9",
    "reference_number": "11111111118",
    "amount": 61000,
    "notes": "beli ketoprak",
    "bank_code": "BRINIDJA",
    "bank_account_number": "11111111118",
    "message": "Duplicate reference number"
  }
}

{
  "response_code": "4019900",
  "response_message": "Unauthorized. Invalid X-SIGNATURE",
  "data": null
}

{
  "response_code": "SP003",
  "response_message": "Insufficient Balance",
  "data": {
    "transaction_id": "101222025122910292195055674",
    "reference_number": "11111111118",
    "transaction_status": {
      "code": "06",
      "desc": "Failed"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "1766978962000",
    "bank": {
      "code": "002",
      "name": "BRI",
      "account_name": "Bambang",
      "account_number": "1231234"
    },
    "gross_amount": {
      "currency": "IDR",
      "value": "61000.00"
    },
    "fee": {
      "currency": "IDR",
      "value": "0.00"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "61000.00"
    },
    "balance_after": {
      "currency": "IDR",
      "value": "0.00"
    },
    "notes": "beli ketoprak"
  }
}

{
  "response_code": "SP020",
  "response_message": "Merchant Account Not Found",
  "data": {
    "account_id": "01K5G4FZZ18DMK0M5QTR8Y9QY9",
    "message": "Merchant Account ID Not Found",
    "reference_number": "11111111118",
    "amount": 61000,
    "notes": "beli ketoprak",
    "bank_code": "BRINIDJA",
    "bank_account_number": "11111111118"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "account_id": "01K5G4FZZ18DMK0M5QTR8Y9QY9",
    "reference_number": "11111111118",
    "amount": 61000,
    "notes": "beli ketoprak",
    "bank_code": null,
    "bank_account_number": "11111111118",
    "message": "Validation error `bank_code`: `The bank code field is required.`"
  }
}

Authorizations

Authorization

string

header

required

JWT issued by POST /api/v1.1/access-token/b2b. Send Authorization: Bearer <token>.

X-PARTNER-ID

string

header

required

Merchant API key (Credential.api_key). Required on every request.

Headers

X-Signature

string

required

HMAC-SHA512 hex signature, computed as HMAC_SHA512(clientSecret, "{HTTP_METHOD}:{REQUEST_URI}:{ACCESS_TOKEN}:{SHA256_HEX(MINIFIED_BODY)}:{X_TIMESTAMP}"). MINIFIED_BODY is the request body with object keys recursively sorted alphabetically and re-serialised with no whitespace (an empty/missing body hashes the empty string). ACCESS_TOKEN is the bearer token without the Bearer prefix. Missing header returns 400 (response_code=4019900); signature mismatch returns 401 (response_code=4019900).

X-Timestamp

string<date-time>

required

ISO-8601 timestamp of the request; used as part of the signed string. Missing header returns 400 (response_code=4019900).

Body

application/json

Request body for submitting a bank disbursement (API v2.0 transfer).

account_id

string

required

Unique identifier (ULID) of the merchant account to debit. Specified in the request body, not in the URL path.

Example:

"01K946KF851RK7FX075GJHBVKF"

reference_number

string

required

Unique merchant reference for this transfer within the account. Used for idempotency; a duplicate reference returns HTTP 400 with response code SP004.

Maximum string length: 64

Example:

"REF-20260610-001"

bank_code

string

required

Destination bank identifier: a three-digit national bank code or a bank SWIFT code.

Example:

"002"

bank_account_number

string

required

Beneficiary account number. Numeric digits only, between 6 and 30 characters.

Example:

"1234567890000"

amount

number

required

Net amount to be credited to the beneficiary, in IDR. Must be within merchant-specific minimum and maximum disbursement limits. The transfer fee is added to compute the gross debit from the merchant account.

Example:

50000

notes

string | null

Optional note attached to the transaction for merchant reference.

Maximum string length: 100

Example:

"Transfer payment"

Response

SP000 Successfully — transfer accepted (often pending in data.transaction_status). Merchant action: check inquiry status.

Custom v2 envelope for disbursement transfer. Success uses SP000 (HTTP 200).

response_code

string

required

SingaPay custom business response code.

Example:

"SP000"

response_message

string

required

Human-readable label paired with response_code.

Example:

"Successfully"

data

object

required

data on successful disbursement v2 transfer or v2 inquiry status (HTTP 200, response_code SP000).

Show child attributes

Getting Started

Security

Accept Money

Send Money

Transaction Records

Money Accounts

Webhook

Disburse Transfer

Authorizations

Headers

Body

Response