Cards

Card charging integration: authorization, capture, installments, 3D Secure, fraud analysis, recurring billing and refunds.

The Credit Card API is the API you use to charge cards in your e-commerce, app or platform. A single integration covers the whole charge lifecycle: real-time authorization and capture, installments, 3D Secure authentication, risk analysis on PayZu's antifraud engine, recurring charges and refunds.

Where to start

Getting started

From the mTLS certificate to your first approved charge in the sandbox.

Endpoints

Complete reference for token, charges and recurrences.

3D Secure

Buyer authentication with the issuing bank.

Antifraud

Risk analysis on PayZu's antifraud engine, integrated into the API.

Recurrence

Recurring charges managed by the API itself.

Webhooks

Charge status notifications via postbackUrl.

Status and reasons

Transaction status, reasons and return codes.

Test cards

Card numbers to simulate transactions in the sandbox.

Environments

Environment	Base URL
Production	`https://api.payzu.io/v1`
Sandbox	`https://api.sandbox.payzu.io/v1`

Authentication combines mTLS (Mutual TLS) with a Bearer token: the client certificate provided by PayZu accompanies every call and the token is obtained via POST /token. This mechanism guarantees client identity and communication security. See the step by step in Authentication.

All monetary values in the API (amount, unitPrice) are expressed in cents. Exchange rates (rate.bid, rate.ask) are the exception: they are decimal numbers.