Skip to main content
Before integrating, please review the API Description and Common Rules.
HaiPay Card Payments support both credit cards and debit cards across major global card networks (VISA, MasterCard, JCB, American Express, Diners Club, Discover) as well as mobile wallets (Apple Pay, Google Pay) in 62 supported countries and regions, covering one-time collection (CIT), merchant-initiated transactions (MIT), and fixed-term recurring subscriptions.

1. Choose Checkout Integration

Compare Checkout Mode (payUrl redirect) and Component Mode (clientToken embed).

2. Choose Transaction Mode

Understand One-Time CIT, On-Demand MIT, and Fixed-Term Subscriptions to match your billing model.

3. Sandbox Test Cards

Simulate successful payments, issuer declines, and post-transaction disputes in the test environment.

Transaction Modes & Capability Matrix

Select the appropriate API endpoint based on whether you are charging once, saving a card for merchant-scheduled/usage-based charges, or running a fixed-cycle subscription plan:

Checkout Integration at a Glance

HaiPay decouples payment methods from checkout integration modes. Every create endpoint returns both payUrl and clientToken:
  • Checkout Mode: Redirect the user to HaiPay’s hosted payment page using payUrl for quick verification with minimal frontend work.
  • Component Mode: Mount the pre-built Component inside your own webpage using clientToken for optimal build efficiency so users pay with cards, Apple Pay, or Google Pay without leaving your site.
For architectural diagrams and a full comparison of developer effort, UI customization, PCI DSS scope, and code snippets, see Checkout Integration Modes.

Payment Methods, Codes & Limits

Card (credit and debit) and mobile wallet transactions are priced and settled in USD (using your USD appId), with a single-transaction limit of 0.99 – 1000 USD:
Mutual Exclusivity between inBankCode and paymentMethods:
  • Pass inBankCode when specifying a single payment method (leave paymentMethods empty).
  • Pass paymentMethods (comma-separated, e.g., "GOOGLE_PAY,CREDIT_CARD") to dynamically control which payment methods are displayed and their top-to-bottom display order (leave inBankCode empty). For example, passing "GOOGLE_PAY,CREDIT_CARD" displays only Google Pay followed by Credit Card from top to bottom.
  • This dynamic display and ordering capability also maps to the Global Cashier.

Core APIs & Interactive Playground

For complete field definitions, signature rules, response schemas, and live testing, jump to the API Reference:

Card Collection Apply

POST /usd/collect/apply — Create a one-time CIT collection order supporting credit/debit cards, Apple Pay, and Google Pay.

MIT Collection Apply

POST /usd/mit/apply — Initial card-saving charge (omit tokenID) or subsequent off-session MIT charge (pass tokenID).

Collection Order Query

POST /usd/collect/query — Query the final payment status and fee breakdown of a collection or MIT order.

Refund Apply & Query

POST /usd/refund/apply and Refund Query /usd/refund/refundQuery — Full or partial refunds (refundAmount).

Request Examples (/usd/collect/apply)

To specify card payment only, pass payType: "BANK_TRANSFER" and inBankCode: "CREDIT_CARD" (omit paymentMethods):

Compliance, Disputes & Security

  • Dispute Window & Handling Fee: Cardholders may file a dispute within 180 days of the transaction date. Each dispute incurs a 20 USD dispute handling fee.
  • Response Options: Upon receiving a dispute notification, you have two choices:
    • Accept the dispute: Confirm to the issuing bank that you do not contest the refund amount.
    • Contest / Rebuttal: Submit supporting evidence through a guided flow to defend your position, which incurs an additional 20 USD rebuttal fee. If the issuing bank rules in favor of the cardholder, the rebuttal fee is deducted and the transaction amount is refunded.
  • Fee Refund Policy: If you win the dispute, HaiPay refunds the rebuttal fee. However, unless otherwise specified in your HaiPay contract, the initial dispute handling fee is non-refundable under all circumstances.
  1. PCI Compliance: Directly violates PCI DSS (Payment Card Industry Data Security Standard) requirements.
  2. Insufficient Isolation: Third-party WebView or wrapper iframe containers may fail to provide adequate security isolation.
  3. Man-in-the-Middle Risk: Malicious host apps may intercept or tamper with sensitive cardholder data.
  4. Phishing Risk: Users cannot verify that they are entering sensitive credentials in a trusted environment.
Always use Checkout Mode or the official Component Mode in a standard, trusted browser environment.

Apple Pay & Google Pay

Device, OS, and browser requirements (#supported-browsers) and wallet configuration details.

CIT vs. MIT Transaction Modes

Deep dive into on-session customer-initiated vs. off-session merchant-initiated transactions and subscriptions.

Supported Regions & Test Cards

Last modified on November 12, 2026