Redirect Payment

API ENVIRONMENT

Endpoint

POST

https://sandbox.ipaymu.com/api/v2/payment

Use credentials from the selected environment. Sandbox and Production credentials are separate.

Redirect Payment allows you to use iPaymu's hosted payment page. This is the easiest way to integrate if you don't want to handle the UI for payment selection.

Production Requirement

In Production mode, ensure your server uses a Static IP and your domain is registered. See IP & Domain Validation.

Redirect Payment Integration Flow

6 sequential steps using iPaymu hosted checkout page

Step 1POST /payment

Request Redirect Payment

Merchant uploads order details to /api/v2/payment along with returnUrl, notifyUrl & cancelUrl.

1 of 6

Step 2Checkout Url

Receive SessionID & Checkout Url

iPaymu returns SessionID & hosted checkout payment Url.

2 of 6

Step 3Browser Redirect

Redirect Customer to iPaymu

Merchant system redirects customer to iPaymu Hosted Payment Page.

3 of 6

Step 4Hosted Checkout UI

Select Channel & Pay

Customer selects preferred payment channel (VA / e-Wallet / QRIS / CC) on iPaymu UI & completes transaction.

4 of 6

Step 5HTTP Callback

Webhook Callback Notification

iPaymu sends HTTP POST callback notification to Merchant notifyUrl.

5 of 6

Step 6returnUrl Complete

Redirect Back to Merchant

iPaymu redirects customer back to Merchant returnUrl (Success Page).

6 of 6

DONE

Request Headers

`Content-Type`

string

Example / value: application/json
Description: MIME type of the JSON request body.

`va`

string

Example / value: YOUR_VA
Description: Merchant Virtual Account number. Get it from the Integration menu in your iPaymu dashboard: Production / Sandbox. Use the VA for the selected environment.

`signature`

string · 64 hex

Example / value: GENERATED_SIGNATURE
Description: Generate an HMAC-SHA256 signature for this request using the API Key from Production / Sandbox. Do not copy the API Key into this header. See Signature Generation.

`timestamp`

string · 14 digits

Example / value: 20260102153045
Description: Request creation time in YYYYMMDDHHmmss format (example: 2 Jan 2026, 15:30:45). Check the endpoint guide if it specifies ISO 8601 instead.

Header	Type	Example / value	Description
`Content-Type`	`string`	`application/json`	MIME type of the JSON request body.
`va`	`string`	`YOUR_VA`	Merchant Virtual Account number. Get it from the Integration menu in your iPaymu dashboard: Production / Sandbox. Use the VA for the selected environment.
`signature`	`string` · 64 hex	`GENERATED_SIGNATURE`	Generate an HMAC-SHA256 signature for this request using the API Key from Production / Sandbox. Do not copy the API Key into this header. See Signature Generation.
`timestamp`	`string` · 14 digits	`20260102153045`	Request creation time in `YYYYMMDDHHmmss` format (example: 2 Jan 2026, 15:30:45). Check the endpoint guide if it specifies ISO 8601 instead.

Request Body

Parameter	Type	Required	Description
`product[]`	array	Yes	List of product names.
`qty[]`	array	Yes	List of product quantities.
`price[]`	array	Yes	List of product prices.
`description[]`	array	Yes	List of product descriptions.
`imageUrl[]`	array	No	Optional. Replace product image on iPaymu payment page. Ordered by index.
`returnUrl`	string	Yes	URL to redirect after successful payment.
`notifyUrl`	string	Yes	URL to receive webhook notifications.
`cancelUrl`	string	Yes	URL to redirect after failed/cancelled payment.
`referenceId`	string	No	Your unique transaction ID.
`buyerName`	string	No	Buyer's name.
`buyerEmail`	string	No	Buyer's email.
`buyerPhone`	string	No	Buyer's phone.
`expired`	number	No	Custom expiry time in hours.
`feeDirection`	string	No	`BUYER` or `MERCHANT`.
`paymentMethod`	string	No	Pre-select payment method (e.g., `va`, `cc`).
`account`	string	No	VA child account ID (optional).

Example Request

{
  "product": ["T-Shirt"],
  "qty": ["1"],
  "price": ["100000"],
  "description": ["Blue Size L"],
  "imageUrl": ["https://images.com/example.jpg"],
  "returnUrl": "https://your-website.com/thank-you",
  "notifyUrl": "https://your-website.com/callback",
  "cancelUrl": "https://your-website.com/cancel",
  "referenceId": "INV-002"
}

Example Response (Success)

{
  "Status": 200,
  "Message": "success",
  "Data": {
    "SessionID": "91538218-5158-459B-8716-DD97FFE3EDAB",
    "Url": "https://sandbox.ipaymu.com/payment/91538218-5158-459B-8716-DD97FFE3EDAB"
  }
}

You should redirect the user to the Url provided in the response.