--- updatedAt: 2026-10-05T06:48:05.000Z agentTools: projectIndex: https://docs.payu.in/v2/llms.txt --- # Verify Payment API To know the status of the payment, you need to integrate the **Verify Payment** API as below. You need to post the **txnId** sent by the **v2/payments** API in the **txnId** parameter. HTTP Method: **POST** **Environment** | | | | :--------------------- | :------------------------------------ | | Test Environment | | | Production Environment | | ## Request parameters ### Request header | Parameter | Description | | :------------ | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | date | The current date and time. For example, format of the date is Wed, 28 Jun 2023 11:25:19 GMT. | | authorization | The actual HMAC signature generated using the specified algorithm (sha512) and includes the hashed data. For more information, refer to[ authorization fields description](#authorization-fields-description). | #### authorization fields description | Field | Description | | :-------- | :---------------------------------------------------------------------------------------------------------------------------------- | | username | Represents the username or identifier for the client or merchant, for example smsplus. | | algorithm | Use SHA512 algorithm for hashing and send this as header value. | | headers | Specifies which headers have been used in generating the hash, for example date. | | signature | The HMAC signature generated using the specified algorithm. For more information, refer to [hashing algorithm](#hashing-algorithm). | #### hashing algorithm You must hash the request parameters using the following hash logic: **Hash logic**: ``sha512(`` + '|' + date + '|' + merchant_secret)`` Where `` contains the request body posted with the request.
```javascript var merchant_key = ''; var merchant_secret = 'YOUR_TEST_SALT'; // date var date = new Date(); date = date.toUTCString(); // authorization var authorization = getAuthHeader(date); function getAuthHeader(date) { var AUTH_TYPE = 'sha512'; var data = isEmpty(request['data']) ? "" : request['data']; var hash_string = data + '|' + date + '|' + merchant_secret; var hash = CryptoJS.SHA512(hash_string).toString(CryptoJS.enc.Hex); return `hmac username="${merchant_key}", algorithm="${AUTH_TYPE}", headers="date", signature="${hash}"`; } ``` ### Body parameters {`
Parameter Description Example

txnId
mandatory

You need to post the txnId sent by the v2/payments API. For more information, refer to any of the following:

54dzPX68BZzE46Q2VYWw
`} ## Sample request ``` curl --location 'https://test.payu.in/v3/transaction' \ --header 'Content-Type: application/json' \ --header 'date: ' \ --header 'authorization: hmac username="", algorithm="sha512", headers="date", signature=""' \ --header 'Info-Command: verify_payment' \ --data '{ "txnId":["512345678901234"] }' ``` ```python import requests import json url = "https://test.payu.in/v3/transaction" headers = { "Content-Type": "application/json", "date": "", "authorization": 'hmac username="", algorithm="sha512", headers="date", signature=""', "Info-Command": "verify_payment" } payload = { "txnId": ["512345678901234"] } response = requests.post(url, headers=headers, data=json.dumps(payload)) print("Status Code:", response.status_code) print("Response:", response.text) ``` ```csharp using System; using System.Net.Http; using System.Text; using System.Threading.Tasks; class Program { static async Task Main(string[] args) { using HttpClient client = new HttpClient(); client.DefaultRequestHeaders.Add("date", ""); client.DefaultRequestHeaders.Add("authorization", "hmac username=\"\", algorithm=\"sha512\", headers=\"date\", signature=\"\""); client.DefaultRequestHeaders.Add("Info-Command", "verify_payment"); string jsonBody = "{\"txnId\":[\"512345678901234\"]}"; StringContent content = new StringContent(jsonBody, Encoding.UTF8, "application/json"); HttpResponseMessage response = await client.PostAsync("https://test.payu.in/v3/transaction", content); Console.WriteLine("Status Code: " + (int)response.StatusCode); Console.WriteLine("Response: " + await response.Content.ReadAsStringAsync()); } } ``` ```javascript const url = "https://test.payu.in/v3/transaction"; const headers = { "Content-Type": "application/json", "date": "", "authorization": 'hmac username="", algorithm="sha512", headers="date", signature=""', "Info-Command": "verify_payment" }; const body = JSON.stringify({ txnId: ["512345678901234"] }); const response = await fetch(url, { method: "POST", headers: headers, body: body }); console.log("Status Code:", response.status); console.log("Response:", await response.text()); ``` ```java import java.io.OutputStream; import java.io.BufferedReader; import java.io.InputStreamReader; import java.net.HttpURLConnection; import java.net.URL; public class Main { public static void main(String[] args) throws Exception { URL url = new URL("https://test.payu.in/v3/transaction"); HttpURLConnection conn = (HttpURLConnection) url.openConnection(); conn.setRequestMethod("POST"); conn.setDoOutput(true); conn.setRequestProperty("Content-Type", "application/json"); conn.setRequestProperty("date", ""); conn.setRequestProperty("authorization", "hmac username=\"\", algorithm=\"sha512\", headers=\"date\", signature=\"\""); conn.setRequestProperty("Info-Command", "verify_payment"); String jsonBody = "{\"txnId\":[\"512345678901234\"]}"; try (OutputStream os = conn.getOutputStream()) { os.write(jsonBody.getBytes("UTF-8")); } int statusCode = conn.getResponseCode(); BufferedReader br = new BufferedReader(new InputStreamReader(conn.getInputStream())); StringBuilder response = new StringBuilder(); String line; while ((line = br.readLine()) != null) { response.append(line); } br.close(); System.out.println("Status Code: " + statusCode); System.out.println("Response: " + response.toString()); } } ``` ```php ", 'authorization: hmac username="", algorithm="sha512", headers="date", signature=""', "Info-Command: verify_payment" ]; $body = json_encode([ "txnId" => ["512345678901234"] ]); $ch = curl_init($url); curl_setopt($ch, CURLOPT_POST, true); curl_setopt($ch, CURLOPT_HTTPHEADER, $headers); curl_setopt($ch, CURLOPT_POSTFIELDS, $body); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $response = curl_exec($ch); $statusCode = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch); echo "Status Code: " . $statusCode . "\n"; echo "Response: " . $response . "\n"; ``` ## Response parameters The fields in the result parameter JSON are described in the following table: | Field | Description | Example | | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------ | ---------------------------- | | mihpayId | Transaction ID is a unique number assigned by PayU for each transaction. Keep note of it for future reference for inquiry or refund. | 21612493009 | | bankReferenceNumber | For each successful transaction – this parameter would contain the bank reference number generated by the bank. | 2411194544 | | amount | This parameter would contain the actual amount involved in the transaction. | 0.00 | | mode | This parameter describes the payment mode by which the transaction was completed (e.g., CC for Credit Card). | CC | | requestId | A unique identifier for the request. | | | originalAmount | The original transaction amount before applying charges or discounts. | 100.00 | | additionalCharges | Additional charges, if any, applied to the transaction amount. | 0.00 | | discount | Any discount amount applied to the transaction. | 0.00 | | netDebitAmount | Total amount debited from the payer's account after additional charges and discounts. | 100.00 | | productInfo | A brief description of the product or service for which the payment was being made. | example\_product | | firstName | The payer’s first name involved in the transaction. | Example Payer | | bankcode | The code of the bank used for the transaction. | AMEX | | nameOnCard | Cardholder's name (null if the value is not captured). | (null) | | cardNo | Masked card number for enhanced security. | XXXXXXXXXXXX2001 | | cardType | The type of card used, such as AMEX for American Express. | AMEX | | udf1 to udf5 | User-defined fields for additional optional data during the transaction process. | (null) | | field2 | Context-specific information from the bank, such as codes or values relevant to verification. | 140455 | | field9 | Describes the status of the transaction. | Transaction is Successful | | errorCode | This parameter provides error code information. | E000 | | errorMessage | Provides a human-readable error message for failed transactions. | No Error | | addedOn | Timestamp when the transaction was initiated. | 2024-11-19 21:17:55 | | settledAt | Timestamp when funds were settled. | 0000-00-00 00:00:00 | | paymentSource | The source of payment handling. | payuS2S | | pgType | Indicates the type of payment gateway used. | CC-PG | | status | Displays the overall status of the transaction. | success | | unmappedStatus | Internal transaction status in PayU’s system, mapped separately. | captured | | merchantUTR | Merchant's Unique Transaction Reference. | (null) | | message | General status message for the transaction. | Found TxnId | | txnId | The transaction ID provided by the merchant for tracking purposes. | 54dzPX68BZzE46Q2VYWw | | rupayAuthRefNo | Reference ID specific to RuPay Cards. | AAACAVJIggICQyRYdUiCEAAAAAA= | | authRefNo | A bank-specific authorization reference number. | AAACAVJIggICQyRYdUiCEAAAAAA= | | originalCurrency | The currency used for the transaction. | INR | | threeDSVersion | Version of the 3D Secure protocol used for securing the transaction. | 2.2.0 | ## Sample response ### Success scenario Formatted JSON Response: If successfully fetched: ```plaintext { "message": "Success", "status": 1, "result": [ { "mihpayId": 21612493009, "bankReferenceNumber": "2411194544", "amount": 100.00, "mode": "CC", "requestId": "", "originalAmount": 100.00, "additionalCharges": 0.00, "discount": 0.00, "netDebitAmount": 100.00, "productInfo": "example_product", "firstName": "Example Payer", "bankcode": "AMEX", "nameOnCard": null, "cardNo": "XXXXXXXXXXXX2001", "cardType": "AMEX", "udf1": null, "udf2": null, "udf3": null, "udf4": null, "udf5": null, "field2": "140455", "field9": "Transaction is Successful", "errorCode": "E000", "errorMessage": "No Error", "addedOn": "2024-11-19 21:17:55", "settledAt": "0000-00-00 00:00:00", "paymentSource": "payuS2S", "pgType": "CC-PG", "status": "success", "unmappedStatus": "captured", "merchantUTR": null, "mcpLookupId": null, "mcpAmount": null, "mcpCurrency": null, "mcpExchangeRate": null, "rupayAuthRefNo": "AAACAVJIggICQyRYdUiCEAAAAAA=", "authRefNo": "AAACAVJIggICQyRYdUiCEAAAAAA=", "originalCurrency": "INR", "threeDSVersion": "2.2.0", "merNetAmount": null, "offerAvailed": null, "message": "Found TxnId", "txnId": "54dzPX68BZzE46Q2VYWw" } ] } ``` ### Failure scenarios * Transaction not found ```plaintext { "message": "Success", "status": 1, "result": [ { "message": "not found", "txnId": "Test1235677235455" } ] } ``` ## Sample Responses ### Success Response ```json { "status": "success", "result": { "paymentId": "PAY_abc123xyz789", "orderId": "ORDER_123", "amount": 10000, "currency": "INR" }, "message": "Transaction successful" } ``` ### Pending Response ```json { "status": "pending", "result": { "paymentId": "PAY_pending456", "orderId": "ORDER_456", "redirectUrl": "https://checkout.payu.in/pay/PAY_pending456" }, "message": "Awaiting completion" } ``` ### Failure Response ```json { "status": "failed", "error": { "code": "PAYMENT_DECLINED", "message": "Declined by bank" }, "result": { "paymentId": "PAY_failed789", "orderId": "ORDER_789" } } ``` ## Error Codes | Code | HTTP Status | Description | Resolution | | ----------------------- | ----------- | ------------------------- | --------------------------------- | | `INVALID_AMOUNT` | 400 | Invalid amount value | Check amount format and value | | `INVALID_CURRENCY` | 400 | Unsupported currency | Use supported currency codes | | `AUTHENTICATION_FAILED` | 401 | Invalid token | Verify authentication credentials | | `DUPLICATE_REFERENCE` | 409 | Reference ID already used | Use unique reference ID | | `PAYMENT_DECLINED` | 422 | Payment declined | Try different payment method | > For complete error code list, see [Error Codes Reference](https://docs.payu.in/reference/error-codes). ## Next Steps 1. **Order Fulfillment**: * If `status` is `success`, record the `mihpayId` and `bankReferenceNumber` in your order database and mark the order as **Paid**. 2. **Handle Pending Transactions**: * If `status` is `pending`, schedule a background retry queue (e.g. check after 5 mins, 15 mins, and 1 hour) before marking the transaction as failed. 3. **Handle Failed Transactions**: * If `status` is `failure`, inspect `errorCode` and `errorMessage` to display user-friendly troubleshooting guidance or allow the customer to retry payment. 4. **Reconciliation**: * Match the returned `amount` and `netDebitAmount` against your ledger and bank settlement sheets.