openapi: 3.1.0 info: title: DuitNow Online Banking - Issuer description: '> **Attention!** These APIs are currently in the specification review stage and not yet available to the general public.

Before initiating any development work using the APIs, we strongly recommend consulting the PayNet commercial team at commercial@paynet.my to get the latest status of the APIs and information on when they will be ready for general use.

Access to our test environment to test these APIs, will only be granted upon approval from PayNet. It is advised not to commence any development work without obtaining the necessary access and approval.

To participants who will need to view the older version of this DuitNow API (v1 & v2) or DuitNow Online Banking (Merchants) please contact solution.advisory@paynet.my' version: 3.0.0 x-internal-version: 2.0.5-v20260116 security: - bearerAuth: [] paths: /v3/payments/transfer-ct: post: tags: - Payments x-product-role: DuitNow Transfer: Issuer DuitNow Online Banking: Issuer DuitNow Request: Issuer summary: Credit Transfer description: 'This is used by an Issuer to initiate credit transfer to an Acquirer. This endpoint covers RPP transaction codes:
- 010: Credit transfer for Pay-to-Account (P2A) - 110: Credit transfer for Pay-to-Proxy (P2P) - 060: Credit transfer for DuitNow Request - 070: Credit transfer for DuitNow Online Banking/Wallet ' parameters: - in: header name: Authorization schema: type: string minLength: 1 pattern: ^\S.*$ description: JWT Bearer Token required: true example: Bearer XXX - in: header name: x-client-id schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: Bank Identification Code of the participant. required: true example: TESTMYKL - in: header name: x-business-message-id schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8 alphanumeric\ \ for the first 8 digits of BIC code)
\nXXX = Transaction Type (3 digits)
\n\ O = Originator (1 alphanumeric)
\nCC = Channel (2 Alphanumeric)
\n\ SSSSSSSS = Serial Number (8 digits)

\nTransaction Type: Refer to\ \ Transaction Type reference

\nOriginator can be any of the following:
\n\ O=OFI
\nH=RPP
\nR=RFI

\nChannel can be any of the following:
\n\ RB \u2013 Retail Internet Banking
\nCB \u2013 Corporate Internet Banking
\n\ RM \u2013 Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated Merchant\ \ Transactions or Merchant Initiated Transactions)
\nBA - Business App\ \ (To be used for FI initiated Merchant Transactions or Merchant Initiated\ \ Transactions)
\nQR - QR Payment (For DuitNow QR use only)\n" required: true example: 20251106TESTMYKL010ORB68670155 - in: header name: x-gps-coordinates schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate example: 40.689263 - 74.044505 - in: header name: x-ip-address schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from. Supports both IPv4 and IPv6 format. required: true example: 127.0.0.1 - in: header name: x-api-version schema: type: string maxLength: 100 examples: - 1.0.0 minLength: 1 pattern: ^\S.*$ description: Target API Version. Default to latest if not provided. requestBody: content: application/json: schema: $ref: '#/components/schemas/PaymentRequest' responses: '200': description: The Payment is successfully processed headers: Authorization: schema: type: string minLength: 1 pattern: ^\S.*$ required: true description: Signed authorization header x-client-id: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: PayNet Client Id x-business-message-id: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ required: true description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" x-gps-coordinates: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate x-ip-address: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from x-api-version: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: Target API Version. Default to latest if not provided. x-deprecated: schema: type: boolean description: '`true` if target API version is deprecated otherwise not provided' x-deprecation-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If deprecation date for target API version has been announced, set to the deprecation date in ISO 8601 date format. Otherwise, not provided. x-sunset-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If sunset date for target API version has been announced, set to the sunset date in ISO 8601 date format. Otherwise, not provided. content: application/json: schema: $ref: '#/components/schemas/PaymentResponse' '400': description: API Validation Error headers: Authorization: schema: type: string minLength: 1 pattern: ^\S.*$ required: true description: Signed authorization header x-client-id: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: PayNet Client Id x-business-message-id: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ required: true description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" x-gps-coordinates: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate x-ip-address: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from x-api-version: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: Target API Version. Default to latest if not provided. x-deprecated: schema: type: boolean description: '`true` if target API version is deprecated otherwise not provided' x-deprecation-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If deprecation date for target API version has been announced, set to the deprecation date in ISO 8601 date format. Otherwise, not provided. x-sunset-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If sunset date for target API version has been announced, set to the sunset date in ISO 8601 date format. Otherwise, not provided. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' /v3/intents/enquire: post: tags: - Intents x-product-role: DuitNow Online Banking: Issuer summary: Retrieve an Intent description: 'This is used by an Issuer to retrieve information about an Intent or a "Request-to-Pay". This endpoint covers RPP transaction code 862. ' parameters: - in: header name: Authorization schema: type: string minLength: 1 pattern: ^\S.*$ description: JWT Bearer Token required: true - in: header name: x-client-id schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: Bank Identification Code of the participant. required: true - in: header name: x-business-message-id schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8 alphanumeric\ \ for the first 8 digits of BIC code)
\nXXX = Transaction Type (3 digits)
\n\ O = Originator (1 alphanumeric)
\nCC = Channel (2 Alphanumeric)
\n\ SSSSSSSS = Serial Number (8 digits)

\nTransaction Type: Refer to\ \ Transaction Type reference

\nOriginator can be any of the following:
\n\ O=OFI
\nH=RPP
\nR=RFI

\nChannel can be any of the following:
\n\ RB \u2013 Retail Internet Banking
\nCB \u2013 Corporate Internet Banking
\n\ RM \u2013 Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated Merchant\ \ Transactions or Merchant Initiated Transactions)
\nBA - Business App\ \ (To be used for FI initiated Merchant Transactions or Merchant Initiated\ \ Transactions)
\nQR - QR Payment (For DuitNow QR use only)\n" required: true - in: header name: x-gps-coordinates schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate - in: header name: x-ip-address schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from - in: header name: x-api-version schema: type: string maxLength: 100 examples: - 1.2.3 minLength: 1 pattern: ^\S.*$ description: Target API Version. Default to latest if not provided. requestBody: content: application/json: schema: $ref: '#/components/schemas/IntentEnquiryRequest' responses: '200': description: The Intent is successfully retrieved headers: Authorization: schema: type: string minLength: 1 pattern: ^\S.*$ required: true description: Signed authorization header x-client-id: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: PayNet Client Id x-business-message-id: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ required: true description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" x-gps-coordinates: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate x-ip-address: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from x-api-version: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: Target API Version. Default to latest if not provided. x-deprecated: schema: type: boolean description: '`true` if target API version is deprecated otherwise not provided' x-deprecation-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If deprecation date for target API version has been announced, set to the deprecation date in ISO 8601 date format. Otherwise, not provided. x-sunset-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If sunset date for target API version has been announced, set to the sunset date in ISO 8601 date format. Otherwise, not provided. content: application/json: schema: $ref: '#/components/schemas/IntentEnquiryResponse' '400': description: API Validation Error headers: Authorization: schema: type: string minLength: 1 pattern: ^\S.*$ required: true description: Signed authorization header x-client-id: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: PayNet Client Id x-business-message-id: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ required: true description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" x-gps-coordinates: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate x-ip-address: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from x-api-version: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: Target API Version. Default to latest if not provided. x-deprecated: schema: type: boolean description: '`true` if target API version is deprecated otherwise not provided' x-deprecation-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If deprecation date for target API version has been announced, set to the deprecation date in ISO 8601 date format. Otherwise, not provided. x-sunset-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If sunset date for target API version has been announced, set to the sunset date in ISO 8601 date format. Otherwise, not provided. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' /v3/intents/{transactionId}/update: post: tags: - Intents x-product-role: DuitNow Online Banking: Issuer summary: Update Intent Status description: This is used by an Issuer to update the status of an Intent or "Request-to-Pay". This endpoint covers RPP transaction code 863. parameters: - in: header name: Authorization schema: type: string minLength: 1 pattern: ^\S.*$ description: JWT Bearer Token required: true - in: header name: x-client-id schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: Bank Identification Code of the participant. required: true - in: header name: x-business-message-id schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8 alphanumeric\ \ for the first 8 digits of BIC code)
\nXXX = Transaction Type (3 digits)
\n\ O = Originator (1 alphanumeric)
\nCC = Channel (2 Alphanumeric)
\n\ SSSSSSSS = Serial Number (8 digits)

\nTransaction Type: Refer to\ \ Transaction Type reference

\nOriginator can be any of the following:
\n\ O=OFI
\nH=RPP
\nR=RFI

\nChannel can be any of the following:
\n\ RB \u2013 Retail Internet Banking
\nCB \u2013 Corporate Internet Banking
\n\ RM \u2013 Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated Merchant\ \ Transactions or Merchant Initiated Transactions)
\nBA - Business App\ \ (To be used for FI initiated Merchant Transactions or Merchant Initiated\ \ Transactions)
\nQR - QR Payment (For DuitNow QR use only)\n" required: true - in: header name: x-gps-coordinates schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate required: true - in: header name: x-ip-address schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from required: true - in: header name: x-api-version schema: type: string maxLength: 100 examples: - 1.2.3 minLength: 1 pattern: ^\S.*$ description: Target API Version. Default to latest if not provided. requestBody: content: application/json: schema: $ref: '#/components/schemas/IntentUpdateRequest' required: true responses: '200': description: The request to update Intent is successfully received headers: Authorization: schema: type: string minLength: 1 pattern: ^\S.*$ required: true description: Signed authorization header x-client-id: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: PayNet Client Id x-business-message-id: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ required: true description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" x-gps-coordinates: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate x-ip-address: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from x-api-version: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: Target API Version. Default to latest if not provided. x-deprecated: schema: type: boolean description: '`true` if target API version is deprecated otherwise not provided' x-deprecation-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If deprecation date for target API version has been announced, set to the deprecation date in ISO 8601 date format. Otherwise, not provided. x-sunset-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If sunset date for target API version has been announced, set to the sunset date in ISO 8601 date format. Otherwise, not provided. content: application/json: schema: $ref: '#/components/schemas/IntentUpdateResponse' '400': description: API Validation Error headers: Authorization: schema: type: string minLength: 1 pattern: ^\S.*$ required: true description: Signed authorization header x-client-id: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: PayNet Client Id x-business-message-id: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ required: true description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" x-gps-coordinates: schema: type: string maxLength: 35 minLength: 1 pattern: ^\S.*$ description: Location of the sender in decimal degree coordinate x-ip-address: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ description: IP address where the transaction originated from x-api-version: schema: type: string maxLength: 100 minLength: 1 pattern: ^\S.*$ required: true description: Target API Version. Default to latest if not provided. x-deprecated: schema: type: boolean description: '`true` if target API version is deprecated otherwise not provided' x-deprecation-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If deprecation date for target API version has been announced, set to the deprecation date in ISO 8601 date format. Otherwise, not provided. x-sunset-date: schema: type: string minLength: 1 pattern: ^\S.*$ description: If sunset date for target API version has been announced, set to the sunset date in ISO 8601 date format. Otherwise, not provided. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' components: schemas: PaymentRequest: x-product-role: - - DuitNow Transfer - Issuer - - DuitNow Online Banking - Issuer - - DuitNow Request - Issuer title: Credit Transfer Request properties: appHeader: type: object required: - endToEndId - transactionId - businessMessageId - creationDateTime properties: endToEndId: type: string description: End to end ID to track a payment from start to finish. Required to use the same format as `businessMessageId`. maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - 20251106TESTMYKL010ORB68670155 transactionId: type: string description: 'Transaction Identifier.
For 010 and 110, use the businessMessageId of this request.
For 060 and 070, use the businessMessageId of Initiate Intent request. ' maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - 20251106TESTMYKL010ORB68670155 businessMessageId: type: string description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - 20251106TESTMYKL010ORB68670155 creationDateTime: type: string description: Message creation date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ possibleDuplicate: type: boolean description: 'Indicates a possible duplicate of a request that was sent in an earlier attempt. To be set to TRUE when re-sending a request to PayNet. ' default: false copyDuplicate: type: string enum: - CODU - COPY - EXPY description: "OFI uses CODU (copy of a duplicate) during the first attempt\ \ of a request, and uses COPY (copy) when retrying the same request.\ \ \nRPP uses COPY to indicate a SAF (Store-and-Forward) and EXPY (expired\ \ retry) to indicate a retry request that has exceeded its retry validity\ \ period. \n" maxLength: 4 minLength: 1 pattern: ^\S.*$ interbankSettlementAmount: type: object description: Amount of the transaction required: - value properties: value: type: number maximum: 1.0e+16 description: 'Value of the transaction in MYR, supports up to 2 decimal places. Special handling for Cross Border transaction:
For static Cross Border QR, value is calculated by converting the foreign currency amount using FX rate in Cross Border QR Enquiry (521) response.
For dynamic Cross Border QR, value is taken from `data.qr.crossborder.foreignCurrencyAmount.value` in Cross Border QR Enquiry (521) response. ' examples: - 34.3 currency: type: string description: Currency of the transaction. Default to MYR. maxLength: 3 default: MYR minLength: 1 pattern: ^\S.*$ debtor: type: object description: Debtor information properties: name: type: string description: Name of debtor / sender maxLength: 140 minLength: 1 pattern: ^\S.*$ examples: - John Doe id: type: string description: Debtor Identifier refers to the ID used to register the customer. For details, please refer to the list of identification types provided here. maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - '890114067878' type: type: string description: Indicates if debtor is Corporate or Retail enum: - RET - COR maxLength: 35 minLength: 1 pattern: ^\S.*$ required: - name - id debtorAccount: type: object description: Debtor account information properties: id: type: string description: Debtor account number maxLength: 34 minLength: 1 pattern: ^\S.*$ examples: - '5555008808290400' type: type: string description: Debtor account type enum: - CURRENT - SAVINGS - CREDIT_CARD - WALLET - LOAN maxLength: 20 minLength: 1 pattern: ^\S.*$ residentStatus: type: string description: "Debtor\u2019s resident status" enum: - RESIDENT - NON_RESIDENT - UNAVAILABLE maxLength: 20 minLength: 1 pattern: ^\S.*$ productType: type: string description: Product type of the account enum: - ISLAMIC - CONVENTIONAL maxLength: 20 minLength: 1 pattern: ^\S.*$ shariaCompliance: type: string description: Whether or not the account is Sharia compliant enum: - 'YES' - 'NO' - UNKNOWN maxLength: 20 minLength: 1 pattern: ^\S.*$ accountHolderType: type: string description: Account holder type enum: - SINGLE - JOINT - GOVERNMENT - CORPORATE - NGO maxLength: 20 minLength: 1 pattern: ^\S.*$ required: - id - type debtorAgent: type: object required: - id properties: id: type: string description: BIC of the originating FI maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - TESTMYKL creditor: type: object description: Information of the creditor, who is the recipient of funds. required: - name properties: name: type: string description: Name of the creditor. For 110, use `RPP` as the creditor name. maxLength: 140 minLength: 1 pattern: ^\S.*$ examples: - John Doe 2 type: type: string description: Indicates if creditor is Corporate or Retail enum: - RET - COR maxLength: 35 minLength: 1 pattern: ^\S.*$ id: type: string description: Required if `secondaryValidationIndicator` is `true`, this is the creditor ID number. maxLength: 20 minLength: 1 pattern: ^\S.*$ examples: - '660215064355' idType: type: string description: Required if `secondaryValidationIndicator` is `true`, this describes the creditor ID type. enum: - NEW_IC - ARMY_POLICE - PASSPORT - BIZ_REGISTRATION maxLength: 20 minLength: 1 pattern: ^\S.*$ creditorAccount: type: object description: Information of the receiving account properties: id: type: string description: Creditor account number. For 110, use proxy registration ID retrieved via Proxy Enquiry API. maxLength: 34 minLength: 1 pattern: ^\S.*$ examples: - '800350003273501000' type: type: string description: Creditor account type, participant to return from Account Enquiry response's creditor account type. For 110, use `PROXY`. enum: - CURRENT - SAVINGS - CREDIT_CARD - WALLET - LOAN - DEFAULT - PROXY maxLength: 20 minLength: 1 pattern: ^\S.*$ required: - id - type creditorAgent: type: object description: Information of the receiving FI. required: - id properties: id: type: string description: BIC of the receiving FI. For 110, use `RPPEMYKL` as the receiving FI. maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - TST1MYKL recipientReference: type: string description: Reference note for creditor. For allowable special character details, please refer to the list provided here maxLength: 140 minLength: 1 pattern: ^\S.*$ example: From John Doe paymentDescription: type: string description: Description for the transaction. For allowable special character details, please refer to the list provided here maxLength: 140 minLength: 1 pattern: ^\S.*$ example: Lunch at Nasi Lemak Shop secondaryValidationIndicator: type: boolean description: If `true`, the creditor account number will be validated against the creditor ID number. default: false acceptedSourceOfFunds: type: array description: Accepted sources of fund or line of credit items: enum: - CASA - CREDIT_CARD - WALLET minItems: 1 proxyLookupReference: type: string description: Applicable for Pay-to-Proxy (110); using the Proxy Enquiry BusinessMessageId is encouraged for traceability. maxLength: 35 minLength: 1 pattern: ^\S.*$ examples: - 20251106TESTMYKL610ORB18722427 required: - appHeader - interbankSettlementAmount - debtor - debtorAccount - debtorAgent - creditor - creditorAccount - creditorAgent - recipientReference PaymentResponse: title: Credit Transfer Response x-product-role: - - DuitNow Transfer - Issuer - - DuitNow Online Banking - Issuer - - DuitNow Request - Issuer properties: appHeader: properties: endToEndId: type: string description: End to end ID to track a payment from start to finish. Required to use the same format as `businessMessageId`. maxLength: 35 minLength: 1 pattern: ^\S.*$ example: 20251106TESTMYKL010ORB68670155 businessMessageId: type: string description: Message Identifier maxLength: 35 minLength: 1 pattern: ^\S.*$ example: 20251106RPPEMYKL010HRB80052120 creationDateTime: type: string description: Message creation date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ originalBusinessMessageId: type: string description: Message Identifier from the request. maxLength: 35 minLength: 1 pattern: ^\S.*$ example: 20251106TESTMYKL010ORB68670155 transactionId: type: string description: Transaction Identifier from the request. maxLength: 35 minLength: 1 pattern: ^\S.*$ example: 20251106TESTMYKL010ORB68670155 required: - endToEndId - businessMessageId - creationDateTime - originalBusinessMessageId - transactionId data: type: object required: - interbankSettlementDate - creditor - creditorAccount properties: settlementCycleNumber: type: string description: Settlement cycle number set by RPP maxLength: 35 examples: - '001' - '002' minLength: 1 pattern: ^\S.*$ interbankSettlementDate: type: string description: Settlement date of the transaction. Expressed in Malaysian local date (YYYY-MM-DD). examples: - 2025-11-06 minLength: 1 pattern: ^\S.*$ creditor: type: object required: - name description: Information on the creditor properties: name: type: string description: Name of the creditor maxLength: 140 minLength: 1 pattern: ^\S.*$ example: John Doe 2 creditorAccount: type: object required: - id description: Information on the receiving account properties: id: type: string description: Creditor Account number. maxLength: 34 minLength: 1 pattern: ^\S.*$ example: '800350003273501000' type: type: string description: Creditor Account type. enum: - CURRENT - SAVINGS - CREDIT_CARD - WALLET - LOAN - DEFAULT - PROXY maxLength: 20 minLength: 1 pattern: ^\S.*$ residentStatus: type: string description: "Debtor\u2019s resident status" enum: - RESIDENT - NON_RESIDENT - UNAVAILABLE maxLength: 20 minLength: 1 pattern: ^\S.*$ productType: type: string description: Product type of the account enum: - ISLAMIC - CONVENTIONAL maxLength: 20 minLength: 1 pattern: ^\S.*$ shariaCompliance: type: string description: Whether or not the account is Sharia compliant enum: - 'YES' - 'NO' - UNKNOWN maxLength: 20 minLength: 1 pattern: ^\S.*$ accountHolderType: type: string description: Account holder type enum: - SINGLE - JOINT - GOVERNMENT - CORPORATE - NGO maxLength: 20 minLength: 1 pattern: ^\S.*$ customerCategory: type: string description: Customer category returned by the RFI enum: - RET - COR - OTH maxLength: 20 minLength: 1 pattern: ^\S.*$ merchant: type: object description: Information about the Merchant, for DuitNow Online Banking/Wallet (070) only. properties: url: type: string description: URL to redirect to Merchant. maxLength: 250 minLength: 1 pattern: ^\S.*$ appId: type: string description: Merchant application ID. maxLength: 140 minLength: 1 pattern: ^\S.*$ resp: properties: status: type: string description: Returns the status of the request enum: - ACTC - ACSP - RJCT maxLength: 4 minLength: 1 pattern: ^\S.*$ reason: type: object required: - name - code - description description: Additional information on the status properties: name: type: string description: Name of the corresponding response code maxLength: 120 minLength: 1 pattern: ^\S.*$ example: ACCEPTED code: type: string description: Response code of the request maxLength: 20 minLength: 1 pattern: ^\S.*$ example: U000 description: type: string description: Description of the response code maxLength: 2000 minLength: 1 pattern: ^\S.*$ example: Success/ Transaction Accepted details: type: string description: Additional information related to the status of the request maxLength: 2000 minLength: 1 pattern: ^\S.*$ additionalCode: type: string description: Additional response code for PayNet troubleshooting maxLength: 20 minLength: 1 pattern: ^\S.*$ required: - status - reason required: - appHeader - data - resp ErrorResponse: type: object required: - appHeader - resp properties: appHeader: type: object description: Application Header required: - originalBusinessMessageId - creationDateTime properties: originalBusinessMessageId: type: string description: Original Message Identifier provided in request maxLength: 35 minLength: 1 pattern: ^\S.*$ rejectionDateTime: type: string description: Message rejection date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ resp: type: object required: - status - reason properties: status: type: string description: Returns the status of the request. Defaults to `RJCT` in an error response. maxLength: 4 minLength: 1 pattern: ^\S.*$ reason: type: object required: - name - code - description description: Additional information on the status properties: name: type: string description: Name of the corresponding rejection response code. maxLength: 120 minLength: 1 pattern: ^\S.*$ code: type: string description: Rejection response code for the request maxLength: 20 minLength: 1 pattern: ^\S.*$ description: type: string description: Description of the rejection reason maxLength: 2000 minLength: 1 pattern: ^\S.*$ details: type: string description: 'Additional information related to the rejection to allow for the precise identification of the rejection reason. This will have a copy of the rejected message in full so the sender can investigate the issue. ' maxLength: 2000 minLength: 1 pattern: ^\S.*$ additionalCode: type: string description: Additional response code for PayNet troubleshooting maxLength: 20 minLength: 1 pattern: ^\S.*$ errorLocation: type: string description: Precise location of the potential error in a message maxLength: 350 minLength: 1 pattern: ^\S.*$ IntentEnquiryRequest: type: object required: - appHeader - debtorAgent - requestedExecutionDateTime properties: appHeader: properties: businessMessageId: type: string description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" maxLength: 35 minLength: 1 pattern: ^\S.*$ creationDateTime: type: string description: Message creation date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ transactionId: type: string description: Business message Id of the Intent. maxLength: 35 minLength: 1 pattern: ^\S.*$ required: - businessMessageId - creationDateTime - transactionId requestedExecutionDateTime: type: string description: Date when payment is expected to be executed/refused by the debtor. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ debtorAgent: type: object required: - id properties: id: type: string description: BIC of the Issuer, which is the debiting FI. maxLength: 35 minLength: 1 pattern: ^\S.*$ IntentEnquiryResponse: type: object required: - appHeader - data - resp properties: appHeader: properties: businessMessageId: type: string description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" maxLength: 35 minLength: 1 pattern: ^\S.*$ creationDateTime: type: string description: Message creation date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ originalBusinessMessageId: type: string description: Message Identifier from the request. maxLength: 35 minLength: 1 pattern: ^\S.*$ transactionId: type: string description: Business message Id of the Intent. maxLength: 35 minLength: 1 pattern: ^\S.*$ required: - businessMessageId - originalBusinessMessageId - creationDateTime - transactionId data: type: object required: - status - expiryDateTime - interbankSettlementAmount - debtor - debtorAgent - creditor - creditorAgent - creditorAccount - recipientReference properties: status: type: string description: Status of the Request-to-Pay. enum: - PENDING - SUCCESSFUL - RECEIVED - CANCELLED - PENDING_AUTHORISATION maxLength: 35 minLength: 1 pattern: ^\S.*$ expiryDateTime: type: string description: Date and time when the intent expires. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ interbankSettlementAmount: type: object description: The amount requested to be paid by the Debtor to the Creditor. required: - value properties: value: type: number maximum: 1.0e+16 description: 'Value of the transaction in MYR, supports up to 2 decimal places. Special handling for Cross Border transaction:
For static Cross Border QR, value is calculated by converting the foreign currency amount using FX rate in Cross Border QR Enquiry (521) response.
For dynamic Cross Border QR, value is taken from `data.qr.crossborder.foreignCurrencyAmount.value` in Cross Border QR Enquiry (521) response. ' currency: type: string description: Currency of the transaction. Default to MYR. maxLength: 3 minLength: 1 pattern: ^\S.*$ default: MYR debtor: type: object required: - name description: Debtor information properties: name: type: string description: Name of debtor maxLength: 140 minLength: 1 pattern: ^\S.*$ id: type: string description: 'Debtor ID, do not include hyphens (''-''), only alphanumeric characters are allowed.
Passport Number should be followed by ALPHA-3 country code of the country of issuance, e.g. E394029340VSGP. Refer to this list for the ALPHA- 3 Country codes https://www.iso.org/obp/ui/#search.
Mobile Number (MBNO) should be the international dialling code preceding with ''+'' and up to 15 digit full mobile number including country code/area code, e.g. +60104940394. Refer to this list for the International dialing country codes https://countrycode.org/' maxLength: 140 minLength: 1 pattern: ^\S.*$ idType: type: string description: Debtor ID type. enum: - NEW_IC - ARMY_POLICE - PASSPORT - BIZ_REGISTRATION - MBNO maxLength: 20 minLength: 1 pattern: ^\S.*$ debtorAgent: type: object required: - id properties: id: type: string description: BIC of the Issuer, which is the debiting FI. maxLength: 35 minLength: 1 pattern: ^\S.*$ creditor: type: object description: Information of the creditor, who is the recipient of funds. required: - name properties: name: type: string description: Name of the creditor. maxLength: 140 minLength: 1 pattern: ^\S.*$ id: type: string description: 'Creditor ID, do not include hyphens (''-''), only alphanumeric characters are allowed.
Passport Number should be followed by ALPHA-3 country code of the country of issuance, e.g. E394029340VSGP. Refer to this list for the ALPHA- 3 Country codes https://www.iso.org/obp/ui/#search.' maxLength: 140 minLength: 1 pattern: ^\S.*$ idType: type: string description: Creditor ID type. enum: - NEW_IC - ARMY_POLICE - PASSPORT - BIZ_REGISTRATION maxLength: 20 minLength: 1 pattern: ^\S.*$ secondaryId: type: string description: 'Creditor Secondary ID, do not include hyphens (''-''), only alphanumeric characters are allowed.
Passport Number should be followed by ALPHA-3 country code of the country of issuance, e.g. E394029340VSGP. Refer to this list for the ALPHA- 3 Country codes https://www.iso.org/obp/ui/#search.' maxLength: 140 minLength: 1 pattern: ^\S.*$ secondaryIdType: type: string description: Creditor Secondary ID type. enum: - NEW_IC - ARMY_POLICE - PASSPORT - BIZ_REGISTRATION maxLength: 20 minLength: 1 pattern: ^\S.*$ creditorAgent: type: object required: - id properties: id: type: string description: BIC of the Acquirer, which is the crediting FI. maxLength: 35 minLength: 1 pattern: ^\S.*$ name: type: string description: Name of the Acquirer. maxLength: 140 minLength: 1 pattern: ^\S.*$ creditorAccount: type: object description: Creditor account information required: - id - type properties: name: type: string description: Creditor account name. maxLength: 70 minLength: 1 pattern: ^\S.*$ id: type: string description: Creditor account number. maxLength: 35 minLength: 1 pattern: ^\S.*$ type: type: string description: Creditor account type. enum: - CURRENT - SAVINGS - CREDIT_CARD - WALLET maxLength: 20 minLength: 1 pattern: ^\S.*$ residentStatus: type: string description: Creditor's resident status enum: - RESIDENT - NON_RESIDENT - UNAVAILABLE maxLength: 20 minLength: 1 pattern: ^\S.*$ productType: type: string description: Product type of the account enum: - ISLAMIC - CONVENTIONAL maxLength: 20 minLength: 1 pattern: ^\S.*$ shariaCompliance: type: string description: Whether or not the account is Sharia compliant enum: - 'YES' - 'NO' - UNKNOWN maxLength: 20 minLength: 1 pattern: ^\S.*$ accountHolderType: type: string description: Account holder type enum: - SINGLE - JOINT - GOVERNMENT - CORPORATE - NGO maxLength: 20 minLength: 1 pattern: ^\S.*$ firstPartyPaymentValidation: type: string description: Indicates if Debiting FI should perform validation on debtor information. enum: - NO_VALIDATION - DEBTOR_NAME - DEBTOR_ID - DEBTOR_NAME_ID maxLength: 20 minLength: 1 pattern: ^\S.*$ default: NO_VALIDATION acceptedSourceOfFunds: type: array description: Accepted sources of fund or line of credit. items: enum: - CASA - CREDIT_CARD - WALLET recipientReference: type: string description: Reference note for creditor. maxLength: 140 minLength: 1 pattern: ^\S.*$ paymentDescription: type: string description: Description for the transaction. maxLength: 140 minLength: 1 pattern: ^\S.*$ merchant: type: object description: Information about the Merchant, for DuitNow Online Banking/Wallet (070) only. properties: url: type: string description: URL to redirect to Merchant. maxLength: 250 minLength: 1 pattern: ^\S.*$ appId: type: string description: Merchant application ID. maxLength: 140 minLength: 1 pattern: ^\S.*$ endToEndIdSignature: type: string description: End to End Id signed by PayNet, used for merchant verification. maxLength: 1024 minLength: 1 pattern: ^\S.*$ msicCode: type: string description: Merchant MSIC code provided by PayNet. minLength: 1 pattern: ^\S.*$ resp: properties: status: type: string description: Returns the status of the request enum: - ACTC - ACSP - RJCT maxLength: 4 minLength: 1 pattern: ^\S.*$ reason: type: object required: - name - code - description description: Additional information on the status properties: name: type: string description: Name of the corresponding response code maxLength: 120 minLength: 1 pattern: ^\S.*$ code: type: string description: Response code of the request maxLength: 20 minLength: 1 pattern: ^\S.*$ description: type: string description: Description of the response code maxLength: 2000 minLength: 1 pattern: ^\S.*$ details: type: string description: Additional information related to the status of the request maxLength: 2000 minLength: 1 pattern: ^\S.*$ additionalCode: type: string description: Additional response code for PayNet troubleshooting maxLength: 20 minLength: 1 pattern: ^\S.*$ required: - status - reason IntentUpdateRequest: type: object required: - appHeader - debtorAgent - status properties: appHeader: properties: transactionId: type: string description: Business message Id of the Intent maxLength: 35 minLength: 1 pattern: ^\S.*$ endToEndId: type: string description: End to end ID to track a payment from start to finish. Required to use the same format as `businessMessageId`. maxLength: 35 minLength: 1 pattern: ^\S.*$ businessMessageId: type: string description: "__Business Message Identifier__

\nFormat: YYYYMMDDBBBBBBBBXXXOCCSSSSSSSS

\n\ Where:
\nYYYYMMDD = Date (8 digits)
\nBBBBBBBB = BIC Code (8\ \ alphanumeric for the first 8 digits of BIC code)
\nXXX = Transaction\ \ Type (3 digits)
\nO = Originator (1 alphanumeric)
\nCC = Channel\ \ (2 Alphanumeric)
\nSSSSSSSS = Serial Number (8 digits)

\n\ Transaction Type: Refer to Transaction Type reference

\nOriginator\ \ can be any of the following:
\nO=OFI
\nH=RPP
\nR=RFI

\n\ Channel can be any of the following:
\nRB \u2013 Retail Internet\ \ Banking
\nCB \u2013 Corporate Internet Banking
\nRM \u2013\ \ Retail Mobile Banking
\nCM \u2013 Corporate Mobile Banking
\n\ OT - Other
\nBW \u2013 Business Web (To be used for FI initiated\ \ Merchant Transactions or Merchant Initiated Transactions)
\n\ BA - Business App (To be used for FI initiated Merchant Transactions\ \ or Merchant Initiated Transactions)
\nQR - QR Payment (For DuitNow\ \ QR use only)\n" maxLength: 35 minLength: 1 pattern: ^\S.*$ creationDateTime: type: string description: Message creation date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ possibleDuplicate: type: boolean description: 'Indicates a possible duplicate of a request that was sent in an earlier attempt. To be set to TRUE when re-sending a request to PayNet. ' default: false copyDuplicate: type: string enum: - CODU - COPY - EXPY description: "OFI uses CODU (copy of a duplicate) during the first attempt\ \ of a request, and uses COPY (copy) when retrying the same request.\ \ \nRPP uses COPY to indicate a SAF (Store-and-Forward) and EXPY (expired\ \ retry) to indicate a retry request that has exceeded its retry validity\ \ period. \n" maxLength: 4 minLength: 1 pattern: ^\S.*$ required: - transactionId - endToEndId - businessMessageId - creationDateTime debtorAgent: type: object required: - id properties: id: type: string description: BIC of the debiting FI. maxLength: 35 minLength: 1 pattern: ^\S.*$ status: type: string description: Status of the Request-to-Pay. enum: - PENDING_AUTHORISATION - REJECT maxLength: 35 minLength: 1 pattern: ^\S.*$ rejectReason: type: string description: Issuer to provide the rejection reason based on the response code table's "Participant Reason Codes". maxLength: 35 minLength: 1 pattern: ^\S.*$ merchant: type: object properties: id: type: string description: 'Merchant ID for PayNet to look up Merchant crediting information. ' maxLength: 35 minLength: 1 pattern: ^\S.*$ productId: type: string description: 'Product identification assigned by PayNet during merchant registration. ' maxLength: 35 minLength: 1 pattern: ^\S.*$ IntentUpdateResponse: type: object required: - appHeader - resp properties: appHeader: properties: transactionId: type: string description: Business message Id of the Intent maxLength: 35 minLength: 1 pattern: ^\S.*$ endToEndId: type: string description: End to end ID to track a payment from start to finish. Required to use the same format as `businessMessageId`. maxLength: 35 minLength: 1 pattern: ^\S.*$ businessMessageId: type: string description: Message Identifier maxLength: 35 minLength: 1 pattern: ^\S.*$ creationDateTime: type: string description: Message creation date and time. Expressed in Malaysian local time with UTC offset format (YYYY-MM-DDThh:mm:ss.sss+/-hh:mm). examples: - '2024-08-26T17:17:08.023+08:00' minLength: 1 pattern: ^\S.*$ originalBusinessMessageId: type: string description: Message Identifier from the request. maxLength: 35 minLength: 1 pattern: ^\S.*$ required: - transactionId - endToEndId - businessMessageId - creationDateTime - originalBusinessMessageId resp: properties: status: type: string description: Returns the status of the request enum: - ACTC - ACSP - RJCT maxLength: 4 minLength: 1 pattern: ^\S.*$ reason: type: object required: - name - code - description description: Additional information on the status properties: name: type: string description: Name of the corresponding response code maxLength: 120 minLength: 1 pattern: ^\S.*$ code: type: string description: Response code of the request maxLength: 20 minLength: 1 pattern: ^\S.*$ description: type: string description: Description of the response code maxLength: 2000 minLength: 1 pattern: ^\S.*$ details: type: string description: Additional information related to the status of the request maxLength: 2000 minLength: 1 pattern: ^\S.*$ additionalCode: type: string description: Additional response code for PayNet troubleshooting maxLength: 20 minLength: 1 pattern: ^\S.*$ required: - status - reason securitySchemes: bearerAuth: type: http scheme: bearer bearerFormat: JWT description: This API supports JWS for authenticating all API requests. For more information, please read our JWS specification. example: Bearer eyJhbGciOiJSUzUxMiIsInR5cCI6IkpXVCIsImtpZCI6IlJQUF9QVksyMDIxIn0.eyJpc3MiOiJCT0VFTVlLMSIsImV4cCI6MTY4MTM4NTc4NywianRpIjoiMjAyMzA0MTJCT0VFTVlLMTAwME9SQjAwMDAwMDAxIiwiZHMiOiJkOWE5NTJkODgzMzhkYzQ4Mzk1MjljNzg4YmQ2N2M2MjlkNDc5NGE5NTZiMzdjODA2ZWU4NGI3OWU4YWE4OTU3OWI5Mzc0ZjVkMTk3ZGNhZTQ4NGQ0OGMyOThmZGVkNjg3YWVhMWU4Yjk3NzMyMTcwZGRmNmM1YzhhYzIwZmNhMCJ9.WAjEQpSsafFfT9WsH4QRTVrvEeU3wD6Ou67WzCF1d7UN2AIJvAASSb0zsAhdRxmvSbdus6UwZBPiSy0VszdpRon8A43olcTvyD4MO2OB9kSC6CYwL6by0rH3Y8U-2txGaO7lcN_ZgtBpus9p2QMO73ZgT3Bhg0t2w80L1NKhG7WHFWxy3h1q9aMAHH8AQLzXtVsHz_xWAw3Lemcuf6Q7gosaVCHm_xB1cTLretGlvXRniyk908afwOtoXJ3hfS5VIGc7-3EVil04UirN-kpQbXKfx35CN9mgsuAuydDCzj6HgEMn3k-mNLhof9ZZaDSziLimETXPN0Y6hnN5h0-54w