---
title: "Card Payment API"
method: POST
path: "/api/v3/purchases"
---

# Card Payment API

`POST /api/v3/purchases`

## Headers

- `Authorization` string
- `Content-Type` string

## Request body

- object
  - `customerId` string, required — Unique identifier for the customer
  - `amount` string, required — The amount being paid. This is usually in the smallest currency unit (e.g Naira)
  - `transactionRef` string, required — Unique transaction reference per transaction.
  - `currency` string, required — Currency being used.
  - `authData` string, required — Combination of the sensitive data of the payment (PAN, PIN, Expiry Date, and CVV2)
  - `deviceInformation` string, json — It is compulsory to collect device information from the user's browser and include it in the payment request.

## Response `200`

200

- object
  - `transactionRef` string
  - `paymentId` string
  - `message` string
  - `amount` string
  - `responseCode` string
  - `plainTextSupportMessage` string

## Other responses

- `400` — 400

---

[API](https://skmtc.net/interswitchgroup/apis/oauth2.md) · [All operations](https://skmtc.net/interswitchgroup/apis/oauth2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/interswitchgroup/oauth2/versions/13065c872c78/schema)