Encryption Rules (MD5 Signature)

To ensure transaction security and prevent parameter tampering, all requests and responses must carry an MD5 signature verified against the merchant's private API secret key.

Algorithm Steps

1. Sort all parameters that need to be signed in ascending order of ASCII code (a-z).
2. Exclude parameters whose values are null or empty string "".
3. Exclude the parameter sign and sign_type (or signType).
4. Concatenate the key-value pairs formatted as key1=val1&key2=val2...
5. Append &key= followed by your API Secret Key at the end of the string.
6. Calculate the 32-character lowercase MD5 hash of this string.

Encryption Example

Transaction Order Placement (PayIn)

Initiates a payment collection request for UPI, QR, or Netbanking payments.

Request Parameters

Synchronous JSON Response (version=1.0)

{
  "respCode": "SUCCESS",
  "tradeMsg": "request success",
  "tradeResult": "1",
  "mchId": "80010001",
  "mchOrderNo": "2026090412345",
  "oriAmount": "100.00",
  "tradeAmount": "100.00",
  "orderDate": "2026-09-04 12:34:56",
  "orderNo": "ORD2026090403150001",
  "payInfo": "http://localhost/pay/uniqueurl?dataIndex=ORD2026090403150001",
  "signType": "MD5",
  "sign": "4ba90c98783a04d2dff2a032148d6d2b"
}

Asynchronous PayIn Notification (Webhook)

After customer payment is confirmed, the platform sends a POST request with application/x-www-form-urlencoded parameters to the merchant's notify_url.

Notification Parameters

Payment on Behalf Order (PayOut / Transfer)

Submits a payout request to disburse funds to a customer's Indian bank account or UPI ID.

Request Parameters

Synchronous JSON Response

{
  "respCode": "SUCCESS",
  "errorMsg": null,
  "signType": "MD5",
  "sign": "53d5cee43aa98c4f91b8b7bc7ea67d90",
  "mchId": "80010001",
  "merTransferId": "TRF_1788472021",
  "transferAmount": "100.00",
  "applyDate": "2026-09-04 03:15:00",
  "tradeNo": "SER2026090403150002",
  "tradeResult": "0"
}

tradeResult codes: 0 = Application received / in progress, 1 = Successful, 2 = Failed.

Asynchronous PayOut Notification

When the payout status changes (funds credited or failed), the platform notifies the merchant's back_url.

{
  "tradeResult": "1",
  "mchId": "80010001",
  "merTransferId": "TRF_1788472021",
  "transferAmount": "100.00",
  "applyDate": "2026-09-04 03:15:00",
  "tradeNo": "SER2026090403150002",
  "signType": "MD5",
  "sign": "d95e221325baaaf16396f323f40b7627"
}

Payout Status Inquiry

Check the status of any payout disbursement if notification is delayed.

Request Parameters

Response Example

{
  "mchId": "80010001",
  "mchTransferId": "TRF_1788472021",
  "transferAmount": 100,
  "applyDate": "2026-09-04 03:15:00",
  "respCode": "SUCCESS",
  "tradeResult": 1,
  "tradeNo": "SER2026090403150002",
  "signType": "MD5",
  "sign": "d95e221325baaaf16396f323f40b7627",
  "errorMsg": null
}

PayIn Order Inquiry

Check the status of any PayIn collection transaction.

Response Example

{
  "respCode": "SUCCESS",
  "tradeResult": "1",
  "mchId": "80010001",
  "mchOrderNo": "WP_TEST_1788472021",
  "tradeAmount": "250.00",
  "orderNo": "ORD202609032347019555",
  "orderDate": "2026-09-04 03:17:01",
  "signType": "MD5",
  "errorMsg": null,
  "sign": "a12498ab0da5bef88e3ba8c46a6b6b76"
}

Check Account Balance

Fetch real-time available funds, total funds, and frozen funds.

Response Example

{
  "mchId": "80010001",
  "amount": 50010.00,
  "frozenAmount": 0.00,
  "availableAmount": 50010.00,
  "respCode": "SUCCESS",
  "signType": "MD5",
  "errorMsg": null,
  "sign": "b2c5f26d5bc474279e08faba8dc0348e"
}

Indian Bank Codes Reference

Use these bank codes when initiating online banking or payout transactions.

Integration Code Examples

Copy-pasteable code examples for placing orders and verifying callbacks.

PHP Implementation

<?php
function generateSign($params, $secretKey) {
    ksort($params);
    $pairs = [];
    foreach ($params as $k => $v) {
        if ($k === 'sign' || $k === 'sign_type' || $v === '' || $v === null) continue;
        $pairs[] = $k . '=' . $v;
    }
    return md5(implode('&', $pairs) . '&key=' . $secretKey);
}

// 1. PayIn Order Request
$mchId = '80010001';
$secretKey = 'e10adc3949ba59abbe56e057f20f883e';

$data = [
    'version' => '1.0',
    'mch_id' => $mchId,
    'mch_order_no' => 'ORDER_' . time(),
    'trade_amount' => '500.00',
    'pay_type' => '101',
    'goods_name' => 'Coins',
    'order_date' => date('Y-m-d H:i:s'),
    'notify_url' => 'https://yourdomain.com/payin_webhook.php',
    'sign_type' => 'MD5'
];
$data['sign'] = generateSign($data, $secretKey);

$ch = curl_init('http://localhost/pay/web');
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
$response = curl_exec($ch);
curl_close($ch);

$result = json_decode($response, true);
echo "Payment Link: " . $result['payInfo'];
?>

Python Implementation

import requests
import hashlib
import time
from datetime import datetime

def generate_sign(params, secret_key):
    filtered = {k: str(v) for k, v in params.items() if k not in ['sign', 'sign_type'] and v != ''}
    sorted_pairs = [f"{k}={filtered[k]}" for k in sorted(filtered.keys())]
    query_str = "&".join(sorted_pairs) + f"&key={secret_key}"
    return hashlib.md5(query_str.encode('utf-8')).hexdigest()

params = {
    'version': '1.0',
    'mch_id': '80010001',
    'mch_order_no': f"PY_ORD_{int(time.time())}",
    'trade_amount': '500.00',
    'pay_type': '101',
    'goods_name': 'Subscription',
    'order_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
    'notify_url': 'https://yourdomain.com/webhook',
    'sign_type': 'MD5'
}
params['sign'] = generate_sign(params, 'e10adc3949ba59abbe56e057f20f883e')

res = requests.post('http://localhost/pay/web', data=params)
print("Response:", res.json())

Node.js Implementation

const axios = require('axios');
const crypto = require('crypto');

function generateSign(params, secretKey) {
  const filteredKeys = Object.keys(params)
    .filter(k => k !== 'sign' && k !== 'sign_type' && params[k] !== '' && params[k] !== null)
    .sort();
  const queryStr = filteredKeys.map(k => `${k}=${params[k]}`).join('&') + `&key=${secretKey}`;
  return crypto.createHash('md5').update(queryStr, 'utf8').digest('hex');
}

const payload = {
  version: '1.0',
  mch_id: '80010001',
  mch_order_no: 'NODE_' + Date.now(),
  trade_amount: '300.00',
  pay_type: '101',
  goods_name: 'Diamonds',
  order_date: new Date().toISOString().replace('T', ' ').substring(0, 19),
  notify_url: 'https://yourdomain.com/webhook',
  sign_type: 'MD5'
};
payload.sign = generateSign(payload, 'e10adc3949ba59abbe56e057f20f883e');

axios.post('http://localhost/pay/web', new URLSearchParams(payload))
  .then(res => console.log('Payment URL:', res.data.payInfo));