Refer merchants using APIs

This documentation provides comprehensive guidance for integrating with PayU's Partner Integration API. This API enables businesses and individual partners to integrate PayU's payment solutions into their platforms, onboard merchants, and manage the complete merchant lifecycle.

Overview

PayU merchant onboarding APIs allows partners to:

  • Onboard merchants to the PayU platform
  • Manage merchant KYC processes
  • Verify bank account details
  • Handle electronic signatures for agreements
  • Receive real-time status updates via webhooks

Authentication and Authorization

PayU Merchant Onboarding employs token-based authentication with OAuth 2.0 standards. Partners must obtain tokens through appropriate authentication endpoints before accessing the API resources.

Token Management Flow

The token-based authentication works as follows:

  • Partners obtain an access token using their credentials
  • This token is included in subsequent API requests
  • Tokens expire after a set period and must be refreshed

Important: Access tokens should be securely stored and never exposed in client-side code.

User Token APIs

The Merchant Onboarding Integration offers several token-related endpoints for authentication purposes. These endpoints handle token generation, refresh, and OTP verification when required.

Merchant Onboarding Process

The Merchant Onboarding flow consists of several key steps:

  1. Create a merchant record with basic details
  2. Update additional merchant information as needed
  3. Add and verify bank account details
  4. Upload the required KYC documents
  5. Complete e-signature process for merchant agreement
  6. Monitor merchant status through webhooks
Create, Update, and Manage Merchants

The APIs for merchant creation and management allow partners to register new merchants and update their information.

For detailed specifications on merchant onboarding, please refer to:

Bank Account Verification

Bank account verification is a critical step in the merchant onboarding process. PayU provides specific APIs for adding, updating, and verifying bank details.

For specifications on bank verification, please refer to:

KYC Document Management

The KYC process requires merchants to provide various identification and business documents. These APIs facilitate document upload and verification.

Document Requirements

Different merchant types require different documentation. The exact requirements should be determined by referencing the official PayU documentation.

Document Upload APIs

For specifications on KYC document management, please refer to:

Document Types and Guidelines

PayU accepts various document types for KYC verification, including:

  • Identity proofs (PAN Card, Aadhaar, etc.)
  • Address proofs
  • Business registration documents
  • Bank account proofs

For an exhaustive list of documents required for an entity, please refer to KYC Checklist.

For an the business category & subcategory details, please refer to Partner Category List.

E-Sign Flow

The electronic signature process is required to complete merchant agreements. PayU provides specific APIs to manage this workflow.

For e-signature specifications, please refer to:

E-sign APIs

Webhooks for Real-Time Updates

Webhooks allow partners to receive notifications about changes in merchant status without polling the API.

For webhook integration details, please refer to:

Security Considerations for Webhooks

Webhook requests should be authenticated to ensure they come from PayU. Implementation details can be found in the webhook documentation.

Error Handling and Troubleshooting

Common KYC Errors and Solutions

KYC document verification can encounter various issues. For detailed information on common errors and their solutions, please refer to:

KYC errors
ErrorSolution

Authorisation Letter Document

Not all partners have signed on authorization letterRe-upload the authorization letter copy with name and signature from all the partners
Names of all partners are not mentioned in authorization LetterRe-upload the authorization letter copy with name and signature from all the partners
Authorization Letter copy uploaded is not on firm's letterheadRe-upload the authorization letter copy on firm's letterhead
Company stamp is missing on uploaded copy of Authorization letterRe-upload Authorization letter with signature and stamp
Authorization letter copy not uploadedUpload copy of authorization letter with signature and stamp
Not all member have signed on authorization letterRe-upload the authorization letter copy with name and signature from all the member
Names of all member are not mentioned in authorization LetterRe-upload the authorization letter copy with name and signature from all the member
signature is missing on uploaded copy of Authorization letterRe-upload Authorization letter with signature and stamp
Not all directors have signed on authorization letterRe-upload the authorization letter copy with name and signature from all the directors
Names of all directors are not mentioned in authorization LetterRe-upload the authorization letter copy with name and signature from all the directors
Uploaded Authorisation letter is not in correct formatRe-upload Authorisation letter in correct format.
Authorised person name mismatch with the provided KYCRe-upload the Authorisation letter with correct authorised person name.
Unauthorised person digital sign received on agreementRe-upload service agreement with Authorised person digital sign.
Entity ( Individual/proprietor/Pvt ltd etc ) written mismatch with the provided documentsRe-upload correct document as per the Entity.
Authorized person signature mismatch with the provided KYC signatureRe-upload the Authorization letter with correct authorised person signature.
Mentioned director's name in authorization letter is not listed with MCA siteRe-upload the authorization letter copy with registered director name and signature
Uploaded Authorization letter is not clearRe-upload clear authrization letter copy
Date not mentioned in board resolution letterRe-upload board resolution letter with board resolution date

PAN Card of Partnership Document

Mismatch in business name on agreement and PAN cardRe-upload the PAN card copy with correct business Name or get the business name changed on your profile.
PAN Number not clear on the uploaded PAN cardRe-upload the readable copy of PAN card
Company PAN card copy not uploadUpload copy of company PAN card.
PAN name mismatch with profile detailsRe-upload correct PAN card or update your correct PAN name on your profile.
Entity ( Individual/proprietor/Pvt ltd etc ) written mismatch with the provided documentsRe-upload correct document as per the Entity.
Uploaded PAN card is not clearRe-upload the clear copy of PAN card

Government Issued Certificate Document

Mismatch in business name on profile and govt. proof copyRe-upload govt. proof copy with correct legal name or get the business name changed on your profile as per your Govt. proof.
Invalid govt proof, not verified by govt officialUpload the valid govt. proof copy like GST , Udhyog aadhar, registartion certificate etc. and same should be verified by govt. official.
Partnership deed is not verified by registrarUpload the partnership deed verified by registrar
Society deed is not verified by registrarUpload the society deed verified by registrar
Details on certificate of Incorporation mismatch with available details on MCAUpload the form 18 or 22 and certificate of incorporation.
Certificate of Incorporation copy not uploadedUpload copy of certificate of Incorporation with sign and stamp
80G copy not receivedRe-upload signed and stamped copy of 80G
12AA copy not receivedRe-upload signed and stamped copy of 12AA
Trust deed is not verified by registrarUpload the Trust deed verified by registrar
govt. proof copy uploaded is expiredRe-upload a valid govt proof as uploaded proof is expired.
Address written on Govt. proof mismatch with profile addressUpdate address details as per the attached govt. proof on your profile or reupload your govt. proof
Address not written on attached govt. proofRe-upload govt. proof with complete address visible.
Incomplete govt. proof uploadedRe-upload govt. proof with all pages.
Entity ( Individual/proprietor/Pvt ltd etc ) written mismatch with the provided documentsRe-upload correct document as per your Business Entity.
Govt proof copy not uploadUpload government proof copy.
Mismatch in legal name on agreement and govt. proof copyRe-upload govt. proof copy with correct legal name

Bank Account Proof Document

A/c no. not printed on uploaded bank proofRe-upload the bank proof with complete details like Account name/Account no. and IFSC code.
Mismatch in bank account holder name on profile details and uploaded bank ProofRe-upload the Bank proof with bank a/c holder name completely visible or get your bank details changed on your profile as per your bank proof.
Mismatch in bank account IFSC code on profile and uploaded bank proofRe-upload the Bank proof with IFSC code completely visible or get your bank details changed on your profile as per your bank proof.
Mismatch in bank account number on profile and uploaded bank proofRe-upload the Bank proof with Bank a/c no. completely visible or get your bank details changed on your profile as per your bank proof.
Bank Proof copy not uploadedUpload copy of bank account proof
Bank Signature and stamp are missing on Bank Verification letterRe-upload the Bank Verification letter with Sign and stamp from bank
Bank Verification letter is not on Bank letter headUpload the bank verification letter on your Bank's letter head
Bank Stamp missing on Passbook providedRe-upload the verified copy of bank passbook
IFSC code not printed on uploaded bank proofRe-upload the bank proof with complete details like account name or account number and IFSC code.
Attached bank proof is not validRe-upload valid bank proof ( ex. Cancel cheque/passbook/BVL/bank statement ) with complete details like Account name/Account no. and IFSC code.
Uploaded Bank proof copy is not readable/ClearRe-upload a readable or clear bank proof copy.
Entity ( Individual/proprietor/Pvt ltd etc ) written mismatch with the provided documentsRe-upload correct document as per the Entity.
Account name not printed on uploaded bank proofRe-upload the bank proof with complete details like Account name/Account no. and IFSC code.

Address Proof of Signing Authority Document

Mismatch in Address on profile and uploaded address proofPlease re-upload the proof of address or get your address changed in your profile details.
Incomplete address proof uploadedPlease re-upload the complete copy of address proof
Address proof copy not uploadedPlease upload the copy of address proof
Address proof copy uploaded is not clearPlease re-upload a readable copy of address proof with signature
Attached address proof is not validRe-upload valid address proof ( ex. Aadhar card/Voter Id/Passposrt/ DL etc. )
Incomplete address written on your profileUpdate address details as per the attached address proof on your profile.
Entity ( Individual/proprietor/Pvt ltd etc ) written mismatch with the provided documentsRe-upload correct document as per the Entity.

PAN Card of Signing Authority Document

Business name mismatch with attached PAN cardRe-upload the correct PAN card or update correct business name on profile.
PAN card name mismatch with profile PAN nameRe-upload the correct PAN card or update correct PAN name on profile.
PAN Number not clear on the uploaded PAN cardRe-upload the readable copy of PAN card.
PAN card copy not uploadUpload a copy of PAN card.
Entity ( Individual/proprietor/Pvt ltd etc ) written mismatch with the provided documentsRe-upload the correct document as per the business Entity.
Physically signed is missing on the uploaded PAN cardRe-upload the copy of PAN card with physical signed.

Common issues include:

  • Document quality problems
  • Information mismatches
  • Missing required fields
  • Format incompatibility

Flow Diagram

Here is a diagram for the high-level integration flow:


Security Best Practices

When integrating with PayU's APIs, follow these security best practices:

  • Implement proper token management
  • Use HTTPS for all communications
  • Validate webhook signatures
  • Securely store sensitive data
  • Implement proper error handling

Testing Recommendations

Testing is essential before moving to production. PayU provides a sandbox environment for testing purposes. Test key aspects including:

  • Authentication flows
  • Merchant creation and updates
  • Document uploads
  • Bank verification
  • Error handling
  • Webhook processing