Skip to main content

Notification Callback

For security reason, we highly recommend Merchant to ensure that the notifications received by Merchant backend, are actually sent by Finpay system. There are two ways to do those activity:

  1. Validate the response by request checking transaction status to Finpay using Check Status Service. This flow is the most secure method to verify the authenticity of Callback. If transaction status match with Callback then Merchant can continue process the order
  2. Validate the response using a comparison of the signature key receive from Finpay system when sending Callback with the signature generated by Merchant them self. If the siganture key does not match please ignore callback send by Finpay and you dont need to process the transaction.

Here are logic of the Signature Key to generate the Signature Key:

hash_hmac("sha512", json_encode($fields), $key);
MethodMerchant URL
POSThttps://url.callback.merchant/

Data Request

NoNameTypeMandatoryMin LengthMax LengthDescription
1 transactionDateStringO150ISO 8601 format
2 transferDateTimeStringM150Actual transfer date time ISO 8601 format
3 originalReferenceNoStringM164Original transaction identifier on service provider system
4 originalPartnerReferanceNoStringO164Original Transaction identifier on service consumer system
5 beneficiaryBackCodeStringM16Original beneficiary bank code on service provider system
6 beneficiaryAccountNameStringM164Original beneficiary account name on service provider system
7 beneficiaryAccountNoStringM164Original beneficiary account number on service provider system
8 amountObjectO12Detail of amount
9 latestTransactionStatusStringM1200 - Success 01 - Initiated 02 - Paying 03 - Pending 04 - Refunded 05 - Cancelled 06 - Failed 07 - Not found
10 triggerTypeStringM19Type of Notification: - automatic (updated by system) - manual (triggered by merchant/operation)
11 additionalInfoObjectO118Additional Info

Sample Request

{
"transactionDate": "2025-06-25T16:43:41+07:00",
"transferDateTime": "2025-06-25T16:43:44+07:00",
"originalReferenceNo": "20250625164341499267",
"originalPartnerReferenceNo": "f6c1bf23-8c86-4241-a445-591275d7efb0",
"beneficiaryBankCode": "91122",
"beneficiaryAccountName": "AHMAD ARIFAI",
"beneficiaryAccountNo": "3205309801",
"amount": {
"currency": "IDR",
"value": "3036663.00"
},
"latestTransactionStatus": "00",
"triggerType": "automatic",
"additionalInfo": {
"notes": null
}
}

Data Response

NoNameTypeMandatoryMin LengthMax LengthDescription
1 responseCodeEnumM17Response Code
2 responseMessageStringM1500Response Message
3 processingTimeNumberM120Processing Time

Sample Response

{
"responseCode": "2000000",
"responseMessage": "Success",
"processingTime": 0.6609270572662354
}