Getting started
Account set-up, credentials and your first integration steps.
Developers
Resources to connect BNYPay to your website, app or back office: from getting started to handling payment updates securely.
Documentation areas
These areas are being confirmed against BNYPay's actual documentation. Each one is marked until it is.
Account set-up, credentials and your first integration steps.
Endpoints, request and response formats, and authentication.
Step-by-step guides for common integration scenarios.
Testing your integration without moving real money.
Libraries and e-commerce platform plugins.
Receiving payment status updates in your system.
Error codes, retries and common questions.
Protecting credentials and verifying notifications.
How it typically works
This is a common pattern across payment providers, shown for orientation. It is not BNYPay-specific documentation.
Your server creates a payment or order for the amount the customer owes.
The customer completes payment using a method they choose.
Your system is told the result and checks the notification is authentic.
You confirm the status server-side, fulfil the order and reconcile.
Illustration
The example on this page is pseudo-code that shows the shape of a typical integration. It does not use BNYPay's real API names, endpoints or credentials.
Visit the developer portal (external site)// Illustrative pseudo-code โ not BNYPay's actual API.
// See the developer portal for real endpoints.
order = createOrder(amount, currency, "INV-2291")
redirectToCheckout(order)
on paymentUpdate(event):
if isAuthentic(event):
updateOrder(event.reference, event.status)
else:
reject(event)
Integration security
Never put secret keys in browser or mobile app code, and never commit them to code repositories.
Serve checkout pages and receive notifications only over HTTPS.
Check that a payment notification is authentic before acting on it.
Confirm payment status with a server-side check before fulfilling orders.
Limit who can access credentials, and rotate them regularly or after any suspected exposure.
Keep useful logs, but never store full card numbers or other sensitive payment data.
Tell us what you are building and which BNYPay solutions you need. Our team can help you choose an integration approach.