PAYWISE

API-first payment transaction infrastructure

Record, monitor, and reconcile every payment transaction through one API.

One record for every QRIS and USDT transaction: the API request that creates it, the webhook that confirms it and the settlement that closes it.

  • Sandbox and live API keys
  • HMAC-signed webhooks
  • Idempotent transaction creation

Trusted by

  • WE88
  • 1x
  • 1w
  • M88
  • HFM
  • XM

Get paid in crypto

Your users can pay with USDT, BTC, ETH, BNB, SOL, TRX or LTC. You always receive USDT.

Countries & currencies

All countries →

How it works

Your backend talks to one API. PAYWISE keeps the record.

  1. 01

    Your backend

    Creates a transaction with a scoped API key and your own order reference.

  2. 02

    PAYWISE API

    Validates, de-duplicates and records it, then tracks its status with the connected provider.

  3. 03

    Your systems & team

    Receives a signed webhook on every status change. Your team works from the same record in the dashboard.

Who it is for

One platform for everyone who touches a payment.

Two developers working at a computer

Your developers

One API to create payments, signed webhooks to confirm them, and a sandbox to test everything first.

A customer paying on her phone

Your customers

They pay by QRIS or USDT on their phone in seconds and see the result straight away.

A team reviewing reports together at a laptop

Your finance team

Every payment, fee and withdrawal in one dashboard, ready to reconcile and export.

API integration

A small, predictable REST API.

Two endpoints cover the whole lifecycle: create and retrieve. Every response has the same format and an X-Request-Id you can find in your API logs.

// create a transaction (sandbox key)

POST /api/v1/transactions

Authorization: Bearer pw_test_•••••••••

Content-Type: application/json

{
    "merchant_reference": "ORDER-1042",
    "amount": 250000,
    "payment_method": "QRIS"
}

// response · 201 · X-Request-Id: 9f1c…

{
    "success": true,
    "data": {
        "reference": "PW20260921143022AB3F",
        "status": "pending",
        "environment": "sandbox"
    }
}

Operations

Everything that happens after the API call, in one place.

Transaction Monitoring

Follow each transaction from creation to final status. Filter by method, status and environment, and export the results.

Webhooks

Status changes are delivered to your endpoint with an HMAC signature. Every attempt is logged with its real response code.

Settlement Tracking

Each paid transaction shows its gross amount, the PAYWISE fee and the net amount. Withdraw any part of your net amount and follow each payout until it arrives.

Risk Management

Alerts for failure-rate spikes, webhook delivery problems, transactions pending too long and inactive merchants.

Our team

Backed by a professional team.

The PAYWISE leadership team
Management
Two developers writing code
Developers
An operations team working on laptops
Operations
Colleagues reviewing numbers at a table
Finance
A team meeting around laptops in an office
Growing teams

Developer experience

Built for the people who integrate it.

Everything needed to go from first key to production lives inside the dashboard.

Open the documentation →

Sandbox playground

Send real requests with a sandbox key without writing any code.

API logs

Method, endpoint, status, latency, and request ID for every call made with your keys.

In-app documentation

Endpoint reference, error codes, and webhook payloads next to your keys.

SDK reference

Copy-ready examples in cURL, PHP, and Node.js.

Security

Protected in layers, from the connection to stored data.

  • TLS 1.3
  • AES-256
  • HMAC-SHA256
  • 2FA
  • WAF + DDoS

Encrypted connections

Every connection to PAYWISE (API, payment page and dashboard) is encrypted with TLS 1.2/1.3 and HSTS, so data cannot be read in transit.

Encrypted account data

Bank account numbers and holder names are stored encrypted with AES-256, in every database backup too.

Protected credentials

API keys are stored as hashes, limited to one merchant and environment, and can be locked to your server IPs. The full key is shown only once, when it is created.

Signed webhooks

Each delivery is signed with HMAC-SHA256 together with its send time, so your endpoint can verify it came from PAYWISE and refuse a replayed webhook.

Two-step sign-in

The dashboard is protected by two-step verification (2FA) and trusted devices. Every new sign-in is logged and notified.

Attack protection

Web application firewall, DDoS protection, request limits, and automatic blocking of IPs that repeatedly try unauthorised access.

Role-based access

Merchant owners, staff, sales partners, and administrators each see only what their role allows.

Audit trail and 24/7 monitoring

API requests, webhook attempts and admin actions are all logged. The platform is monitored around the clock and backed up every hour.

PAYWISE on your phone and computer

Free · No app store · Same account as the website · Android · iPhone · Windows · Mac

Install the app

Start with a sandbox key today.

Create an account, generate a sandbox key, and send your first transaction from the playground in minutes.