HF Process with Encrypted Data

Process a payment using fully encrypted card data including card number, cardholder name, expiry date, and CVV.

Endpoint Information

Name: Hosted Fields Process with Encrypted Card Data and Customer Token
Method: POST
URL: {{BASE_URL}}/api/v1/payment/hf-process-transaction

Authentication

Type: Basic Auth

• Username: App Key
• Password: Secret Key

Request Body

Content-Type: application/json

{
    "customerToken": "2e7dcfb6fb2d84d1c7740bc5fef2e3aa",
    "currency": "EUR",
    "amount": "1000",
    "webhookUrl": "https://example.com/transaction-result/webhook?operatorId=100643&locale=en",  // optional, max 255 characters
    "solutionUniqueId": ["6a9b09ea-3313-4577-a6de-f9be9d04caf1"],  // optional
    "merchantAccountId": "100643",
    "card_name": "gcBqQaEykuq/kIBl5dfa+MzuT0rx5eN6PiB+Tr+6LwqI8NlWiRxGbTCyivJbLf1+MYfUpKjy7CIOBwEuDvpJbJV0FLhVxbbV07U6bf0oK+QqoXNWfMwyAoXwETcdG4tGUdDgL+Swbs9lbvkRonEx3ucNE33pB7oPGivZvzFz26uCmomC+/pagTP379Yp5MebjIKwlUygi90lX9BIafbWIjeQ09a4qENmrGEwPmJpby7FcB7mIeSoKIeRW8VtJQPUOyq4YeaxFEWgDK0BPYp+CpxSKHpQ68a2DP5bIWGE6aEF1QUgj1msOPuxM9W1ZcEXCq9VjzP/rIN6AO4HdhSptA==",
    "card": "MhQnymw22QorvinVObtaFsQgWuOwYKMY9eJgg+l3UD1KNCRaD1KFuXVQQ7ySuHrQFSiVpCZLlrBEHrLeJJiyRn/O2fOH9QI3UhavAnxFZHzdKNHfpa+XD7zmYwlEiHGvnGELUPaVS5coLM61R6cbeMA9dj2gS8MZFwJcKqOMohhw8BQOLmqrJayfkfARaiEAl6r8c1+X7B4+n8oAgK4ZbEU1asEChd4iDhY5E87LXzlHLMHLu8SQGhJj9z2JUnZrRKOOkh+j0qSfhAKOoF8P1qOf8Vtf8KLL9fgv7rMQJ7NqJqtmFeR2bltjPb2NR7qpmdG5sFGdnhbhOgr56GKC4Q==",
    "secret": "hJttJGsNkYQOP+VnIonwIRhPJI7icZcrRCUoqqhBveeSZ/FOEn1Wxlgaaz17Jsme5SNunPeDlac+IpYLYeUClDKCDlU1BpVE6KFNUJBCHY6PNwo9sjVpfcCoCtqrst5D53AMxK7LCop0STpMuQEBza59DVKdiyYPt4t+RNBmjONQrlN3PvnVcXKarApRlwXtOnbjfm2qDgOEjJCmFjJYUGhIfELs1xb+0yup/6+OCP4mpsV0udXc4kQEqpbUuqQ5zYQkM+69/Kzw3nR7o63yNsHVpk30hS41u3pNtUZkglPECdrSuWqBazZHZJuYP+zjfozpDb63YZPZv8q7T1fyKQ==",
    "expiry_date": "QKDjud9HT3tA8EmrZNuYz5CXyqXWF6xC4OrhS/csSMTmAQvzg7HXPd2RBsqA1wHRut8NUtpk2V+6tPoj53G8dap73QpSifkqy9jQj6msxQW+Xv5uua0SOOiJYHc/QDLlmBXCL5wasRgihrAnQQp2Mud04/1tMWx2r4V6sVXEaswiCGHNyHtpzs15JDFE7X26gczUG+B64QjwSUPxKhbYSxA/QEoZB/NILebQAF8BhFMfV48SvbV7AW5B2VTgH3HVVTlTjXB9csVRYRgVWy7qCSw9+fZvrZhDbjtIt3OjX70u4rvkK/TaGuDQsx7vohE6zPZOr+I38ekaRCTxAwC4vw==",
    "customerBrowserUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36",
    "customerIP": "103.213.242.81",
    "is_hosted_fields_encrypted": true // Required - must be true
}

warning

Important: All card data fields (card_name, card, expiry_date, secret) must be encrypted using the Paymid Hosted Fields encryption library before sending to the API.

{
    "success": true,
    "message": "Payment processed successfully",
    "data": {
        "reference": "auto_generated_ref_123",
        "status": "Accepted",
        "transactionId": "txn_encrypted_789xyz",
        "amount": "1000.00",
        "currency": "EUR",
        "processorReference": "PROC_ENC_456789",
        "cardBrand": "Visa",
        "lastFourDigits": "4242",
        "createdAt": "2025-12-28 12:45:20"
    }
}

warning

Note: This method provides maximum security as card data is encrypted on the client side before transmission. The encryption library can be obtained from your Paymid account dashboard. All encrypted fields are Base64-encoded encrypted strings.