"IPAddress": "1.1.1.1", "ZIPCode": "MRS3000", "Country": "MLT", "MobileNo": "+20100000000" }, Transaction or Payment Reference "PspID": "342342” "PaymentDestination": { "PaymentMethod": "CardToken", "CardToken": "c840e58e-519d-409a-b525-297fadf60733" }, "PaymentDestination": { "PaymentMethod": "Card", "CardType": "VISA", "CardNumber": "4000000000001018", "CardHolderName": "Apco Test", "ExpMonth": "12", "ExpYear": "2040", "CvV2":"123" }, Test Indicator "isTest”: true "isTest”: true "isTest”: true Sample Payout Request using the PSP ID { "TransactionType": "ORIGINALCREDIT", "Amount": 1.00, "Currency": "EUR", "OrderReference": "Order42323", "UniqueReference": "e0a65b67-6723-4ed4-bcdc-168f242f8df9", "ClientAccount": "testing", "CallBackURL": "https://api.dev.apspglobal.com/technicalsupporttool-fe/Listener", "RedirectionURL": "https://api.dev.apspglobal.com/technicalsupporttool-fe/Redirect/", "FailRedirectionURL": "https://www.yourURLhere.com/Redirect/failed", "Client": { "FirstName": "Apco", "LastName": "Test", "Email": "apcotest@test.com", "Street": "1,Street", "City": "Marsa", "IPAddress": "1.1.1.1", "ZIPCode": "MRS3000", "Country": "MLT", "MobileNo": "+20100000000" }, "IsTest": true, "PSPID": "823205" } Requesting a Recurring transaction The mandatory fields are required to process a recurring transaction using our direct connect integration. Note that

"UniqueReference": "4fe126cb-146b-426c-8234c-c8ca12e5072f", "RedirectionURL": "https://www.yourURLhere.com/Redirect/", "CallBackURL": "https://www.yourURLhere.com/Listener", "PspId" : "153574", "IsTest": true } Requesting a Payout Using our direct integration, below are the mandatory fields required to process a payout . We currently support three options for payout: via a PSP ID via a Card Token via a full Card PAN details Description PSP ID Card Token Full Card PAN Transaction Type "TransactionType": "ORIGINALCREDIT" Force Transaction Routing Not required "Routing": { "ForceBank": "SAFECHARGE" }, "Routing": { "ForceBank": "SAFECHARGE" }, Client "Client": { "FirstName": "Apco", "LastName": "Test", "Email": "apcotest@test.com", "Street": "1, Street", "City": "Marsa", "IPAddress": "1.1.1.1", "ZIPCode": "MRS3000", "Country": "MLT", "MobileNo": "+20100000000" }, "Client": { "FirstName": "Apco", "LastName": "Test", "Email": "apcotest@test.com", "Street": "1, Street", "City": "Marsa", "IPAddress": "1.1.1.1", "ZIPCode": "MRS3000", "Country": "MLT", "MobileNo": "+20100000000" }, "Client": { "FirstName": "Apco", "LastName": "Test", "Email": "apcotest@test.com", "Street": "1, Street", "City": "Marsa", "IPAddress

information on different card use cases here .

MB WAY is a widely used mobile payment solution in Portugal, developed by SIBS, the country's leading payment processor. Launched in 2015, it enables users to link their bank cards to their mobile numbers, facilitating instant payments, money transfers, and online purchases. With over 5 million users, MB WAY has become integral to daily transactions in Portugal, offering features like QR code payments, contactless transactions via NFC, and the ability to withdraw cash from ATMs without a physical card. Its user-friendly interface and broad acceptance among merchants have solidified its position as a preferred payment method nationwide. Supported Transaction Types Authorisation Purchase Capture Void Refunds Withdrawals Integrations Supported Deposit Hosted Payment Page Direct Connect Currencies & Countries Supported Title Description Currencies Supported EUR Countries Supported Portugal Additional attributes to process Cards via Monetix You must include the following JSON Attributes to the payload. These attributes inform us to proceed

Integration Types Use this page to compare the features of our integration solutions: Hosted Payment Page Payment Operations API ( requires `'SAQ D PCI certification' when processing card payments with raw card data) Payment Links Payment Flow Hosted Payment Page and Payment Links are comprehensive, end-to-end solutions that manage card tokenization, processing of Alternative Payment Methods, payment requests, and authentication seamlessly. The Payments Operations API requires a higher level of technical integration effort, including the implementation and management of 3D Secure authentication. Integrated payment methods Our Hosted Payment Page and Payments Links accept cards payments (Visa & Mastercard) along with a full list of Alternative Payment Methods . Our Payments API supports the payment types detailed in the table below: Payment Flow Supported Methods Deposit Card Transactions Withdrawal Card Transactions Alternative Payment Methods Payment form configuration Our hosted payment page presents customers with a payment form that offers diverse configuration and

Utilize a refund to reimburse a customer for a payment. Refunds can be executed via API or our portal. There are two types of refunds you may need to process: Full Refund : This returns the entire payment amount to the customer and can only be performed once. Partial Refund : This returns a sum less than the captured amount. Multiple partial refunds can be issued, but the cumulative refunded amount cannot exceed the original payment amount. Warning Refunds cannot be cancelled once they have been requested. Request a refund via API To process a refund successfully, you must provide the PSP ID of the captured payment. The request is provided in the response The requests are the same for partial and full refunds . Any refunds for less than the originally captured amount will be considered partial refunds. The transaction type PARTIALREFUND applies for full and partial refunds. PUT /api/directconnect/execute

Allows the processing of UPI for both deposits and withdrawals. This method also supports IMPS for instant payouts. Supported Transaction Types Authorisation C apture Purchase Refund Void Payouts Integrations Supported Deposit Hosted Payment Page Direct Connect ( server-to-server) Withdrawal Hosted Payment Page Direct Connect ( server-to-server) Currencies & Countries Supported Title Description Currencies Supported INR Countries Supported India Additional attributes to process UPI via DashFin for Deposit You must include the following JSON Attributes to the payload. These attributes inform us to proceed with the redirection to DashFin in order to finalize the payment process. Description Hosted Payment Page Force Transaction Routing "Routing":{ "ForcePayment": "DASHFIN” } Client Details "Client": { "FirstName": "Joe", "LastName": "Bloggs", "Email": "test@mailinator.com", "MobileNo": "9999999999", "Country": "MLT", "ClientAccount": “APCOPAY TEST"" } Test Indicator (required in Sandbox Environment only) " isTest " : true  Below is a sample request. You can find a more detailed explanation on our APIs in our

PayPal is a global payment gateway that enables businesses to securely accept online payments from customers using PayPal accounts, credit cards, and other local payment methods. Supported Transaction Types Authorisation Purchase Capture Void Refunds Withdrawals Integrations Supported Deposit Hosted Payment Page Direct Connect Withdrawals and Refunds Hosted Payment Page Direct Connect A merchant registration with PayPal is required in order to begin processing. This process can be completed by obtaining a Brand Code, Client ID and Client Secret from Apco Support ( support@apcopay.com ) and completing the registration via the link below. Please replace {brandcode} in the URL with the code provided. Merchant Registration URL: https://payments.apcopay.tech/paypal/Registration?BrandCode={brandcode} The Client ID and Secret are required on the second screen of the setup, as shown in the screenshot below: Currencies & Countries Supported Title Description Currencies Supported Most major currencies Additional attributes required for Deposits You must

How to blacklist a card Blacklisting a card ensures that all future transactions from the card are automatically blocked and will be declined . Availability of Blacklisting This functionality is available exclusively for card transactions. 1. Locate the Transaction Log In to the Portal : Visit portal.apcopay.tech and log in with your reference, username, and password. Search for the Transaction : Use the search criteria box at the top to locate the card you want to block. 2. Open the Transaction Details Select the Transaction : In the search results, click on the transaction to see the relavant card information. Verify Card Details : Ensure that the card details displayed are correct and match the card you intend to blacklist. 3. Action the blacklisting Click "Block Card" : Within the transaction details page, locate the "Block Card" option and select it. Confirm the block : A confirmation prompt will appear. Confirm the action to finalize

Supported Transaction Types Authorisation AUTH C apture CAPT Purchase PURC Refund PARTIALREFUND Void GENERALVOID Payouts ORIGINALCREDIT Recurring PURC Integrations Supported Deposit - Purchase Hosted Payment Page Direct Connect ( server-to-server) Capture, Refunds, Payouts Hosted Payment Page Direct Connect ( server-to-server) Currencies & Countries Supported Title Description Currencies Supported Most major currencies Additional attributes to process Deposits You must include the following JSON Attributes in the payload. If you are using our Hosted Payment Page Description Hosted Payment Page Transaction Type "TransactionType": "PURC" Force Transaction Routing "Routing": { "ForceBank": "FT" Client Details "Client" : { "Email": " johndoe@gmail.com ", "FirstName" : "John", "LastName" : "Doe", "MobileNo": "+35612345678", "City" : "Mqabba", "IPAddress" : "214.21.134.79", "Country" : "GBR" Test Indicator "isTest”: true Sample requests using our Hosted Payment Page can be viewed here. { "TransactionType": "PURC", "Currency": "EUR", "Amount": "55.3", "OrderReference": "FT test", "RedirectionURL": "https://www.yourURLhere.com/Redirect/", "FailRedirectionURL": "https://yourURLhere.com/FailRedirect/", "CallBackURL": "https://www.yourURLhere

Commercial Joint Stock Bank - TPBB VND VietcomBank - VCBB VND VietinBank - VTBB VND Vietnam International Commercial Joint Stock Bank - VIBB VND Vietnam Maritime Commercial Joint Stock Bank - MSBB VND Additional attributes to process Deposit - Bank Transfer You must include the following JSON Attributes to the payload. These attributes inform us to proceed with the redirection to finalise the payment process. Description Hosted Payment Page Force Transaction Routing "Routing":{ "ForcePayment": "TRUEPAY” }  Client Details "Client": { "FirstName": "Joe", "LastName": "Bloggs", "Email": " johndoe@mail.com ", "IPAddress": "127.0.0.1", "City": "Valletta" } Payment Method Data "PaymentMethodData": { "BankBranchCode": "AFBB" }, Test Indicator (required in Sandbox Environment only) "isTest " : true Sample request below { "TransactionType": "PURC", "Amount": "200.00", "Currency": "THB", "OrderReference": "TRUEPAY TEST", "UniqueReference": "3a9f50f7-2deb-4dbf-a186-d58641s36665", "RedirectionURL": "https://www.yourURLhere.com/Redirect/", "CallBackURL": "https://www.yourURLhere.com/Listener", "FailRedirectionURL": "https://www.yourURLhere.com/Redirect/", "Routing": { "ForcePayment": "TRUEPAY" }, "Client": { "FirstName": "Apco", "LastName": "Test", "ClientAccount": "APCOPAY TEST

Overview Apcopay Hosted Fields provides a secure, PCI-compliant solution for collecting and tokenizing payment card details via an iframe. Merchants do not handle raw card data; instead, they receive a token to finalize payment server-side. 🧩 Integration Flow Summary Backend creates a session via /api/hostedfields/createsession . Frontend initializes the Hosted Fields iframe using the session token. User inputs card data directly into the iframe. Iframe tokenizes the card and returns a CardToken . Backend uses CardToken with /api/hostedfields/pay to process the payment. 🔗 API Endpoints Step Endpoint Method Description 1 /api/hostedfields/createsession POST Creates a session and returns SessionToken 5 /api/hostedfields/pay POST Processes the payment using CardToken API Authentication & Signature Calculation Please refer to following documentation for implementing the correct safeguards for Authentication and Payload Signature validation API Documentation You can find the full payload details at the following link . 🔁 Hosted Fields

Dynamic Webhooks Based on the specific Provider/s utilized for payments, the webhook response may vary in structure. We recommend that webhook parsing logic is not strict to a rigid contract however JSON attributes should be parsed allowing for additional attributes that can be added over time. See: Payment Notifications and Extended Payment Notification as a guide. Validate for Tempering on all interactions Ensure that the same signature algorithm validation is consistently applied across all stages of the transaction process—such as the initial request, redirection, and webhook notifications. This practice helps verify the integrity and authenticity of data throughout the entire process, preventing tampering and ensuring that each part of the transaction is securely validated. By maintaining consistency in your signature algorithms, you enhance the overall security and reliability of your transaction handling. Tempering Validation vs Payload Validation The application logic should calculate the signature based on the

Below are the links to the official logo and brand guidelines for the two card schemes. Visa Brand Guidelines Mastercard Brand Guidlines Maestro Brand Guidelines American Express Brand Guidelines

Supported Transaction Types Authorisation AUTH C apture CAPT Purchase PURC Refund PARTIALREFUND Void GENERALVOID Payouts ORIGINALCREDIT Recurring AUTH / PURC Integrations Supported Deposit - Authorisation / Purchase Hosted Payment Page Direct Connect ( server-to-server) Capture, Void, Refunds, Payouts, Recurring Hosted Payment Page Direct Connect ( server-to-server) Currencies & Countries Supported Title Description Currencies Supported EUR, USD, GBP, JPY and many others. Additional attributes to process Deposits You must include the following JSON Attributes to the payload. These attributes inform us to proceed with the redirection to Trust to finalize the payment process. if you are using our Hosted Payment Page Description Hosted Payment Page Force Transaction Routing “Routing”:{ "ForceBank": "TRUST” }  Client Details "Client": { "Email": "test@gmail.com", "FirstName": "Apco", "LastName": "Test", "MobileNo": "7777777", "Street": "Church Street", "City": "Virtu", "State": "Rabat", "ZIPCode": "RBT2640", "Country": "MLT", “IPAddress": "1.1.1.1" } Test Indicator "isTest”: true Sample requests using our Hosted Payment Page can be

After a card payment has been authorised, the transaction remains incomplete until it undergoes the capture process. If you decide not to proceed with capturing the payment, you have the option to void it via our card payments API. Voids are only possible for card payments. Voids are only possible on transactions which are of transaction type: Authorisation ( 'Auth' ) Purchase ( 'Purc' ) Information Voids can only be processed within a 24-hour timeframe from the original transaction posting. Should this period elapse, you have the option to process a refund or payout instead. It is not possible: To void a transaction which has been captured. To void a refund or payout. Contigent on your acquirer Some rare acquirers do not support 'Voids'. You can verify this by checking the acquirer specifications for the supported transaction types of your acquirer. Should your acquirer not support voids , you have the option to process

Multibanco is Portugal's leading interbank network, providing a wide range of financial services like ATM withdrawals, bill payments, and online transactions. Trusted and widely accessible, it’s a key payment method across Portugal. Supported Transaction Types Authorisation Purchase Capture Void Refunds Withdrawals Integrations Supported Deposit Hosted Payment Page Direct Connect Currencies & Countries Supported Title Description Currencies Supported EUR Countries Supported Portugal Additional attributes to process Cards via Monetix You must include the following JSON Attributes to the payload. These attributes inform us to proceed with the redirection to finalise the payment process. Description Hosted Payment Page Force Transaction Routing "Routing":{ "ForcePayment": "MONETIX” }  Client Details "Client": { "FirstName": "Joe", "LastName": "Borg", "Street": "12 Church street", "City": "Valletta", "Email": " TestEmail@Email.com ", "ClientAccount": "testing", "IPAddress":"1.1.1.1" } Payment Method Data "PaymentMethodData": { "PaymentMethod": "MULTIBANCO" } Test Indicator (required in Sandbox Environment only) "isTest”: true Sample request below { "TransactionType": "PURC", "Amount": 100.00