NICTBD.COM Payment Gateway API Documentation

$storeId = "STORE-2-FRXECLKM";
$apiKey = "pk_live_xxxxxxxxx";
$secret = "sk_live_xxxxxxxxx";

$tranId = "INV" . date("YmdHis");
$amount = "100.00";

$signature = hash_hmac(
    "sha256",
    $storeId . "|" . $tranId . "|" . $amount,
    $secret
);

$payload = [
    "store_id" => $storeId,
    "api_key" => $apiKey,
    "amount" => $amount,
    "tran_id" => $tranId,
    "currency" => "BDT",
    "customer_name" => "Rahim Uddin",
    "customer_mobile" => "01700000000",
    "customer_email" => "rahim@example.com",
    "success_url" => "https://merchant.com/payment/success",
    "failed_url" => "https://merchant.com/payment/failed",
    "cancel_url" => "https://merchant.com/payment/cancel",
    "webhook_url" => "https://merchant.com/api/payment/webhook",
    "signature" => $signature
];

$ch = curl_init("https://nictbd.com/api/payment/create");

curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST => true,
    CURLOPT_HTTPHEADER => [
        "Content-Type: application/json",
        "Accept: application/json"
    ],
    CURLOPT_POSTFIELDS => json_encode($payload)
]);

$response = curl_exec($ch);
curl_close($ch);

$result = json_decode($response, true);

if (($result["status"] ?? null) === "success") {
    header("Location: " . $result["payment_url"]);
    exit;
}

echo $result["message"] ?? "Payment create failed";

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Http;

public function pay(Request $request)
{
    $storeId = config('services.nictbd.store_id');
    $apiKey = config('services.nictbd.api_key');
    $secretKey = config('services.nictbd.secret_key');

    $tranId = 'INV' . now()->format('YmdHis');
    $amount = number_format(100, 2, '.', '');

    $signature = hash_hmac(
        'sha256',
        $storeId . '|' . $tranId . '|' . $amount,
        $secretKey
    );

    $payload = [
        'store_id' => $storeId,
        'api_key' => $apiKey,
        'amount' => $amount,
        'tran_id' => $tranId,
        'currency' => 'BDT',
        'customer_name' => 'Rahim Uddin',
        'customer_mobile' => '01700000000',
        'customer_email' => 'rahim@example.com',
        'success_url' => route('payment.success'),
        'failed_url' => route('payment.failed'),
        'cancel_url' => route('payment.cancel'),
        'webhook_url' => route('payment.webhook'),
        'signature' => $signature,
    ];

    $response = Http::acceptJson()
        ->asJson()
        ->post(config('services.nictbd.base_url') . '/api/payment/create', $payload);

    $result = $response->json();

    if (($result['status'] ?? null) === 'success') {
        return redirect()->away($result['payment_url']);
    }

    return back()->with('error', $result['message'] ?? 'Payment create failed.');
}

curl -X POST "https://nictbd.com/api/payment/create" \
  -H "Content-Type: application/json" \
  -H "Accept: application/json" \
  -d '{
    "store_id": "STORE-2-FRXECLKM",
    "api_key": "pk_live_xxxxxxxxx",
    "amount": "100.00",
    "tran_id": "INV20260614010101",
    "currency": "BDT",
    "customer_name": "Rahim Uddin",
    "customer_mobile": "01700000000",
    "customer_email": "rahim@example.com",
    "success_url": "https://merchant.com/payment/success",
    "failed_url": "https://merchant.com/payment/failed",
    "cancel_url": "https://merchant.com/payment/cancel",
    "webhook_url": "https://merchant.com/api/payment/webhook",
    "signature": "generated_hmac_signature"
  }'

$storeId = "STORE-2-FRXECLKM"
$apiKey = "pk_live_xxxxxxxxx"
$tranId = "INV" + (Get-Date -Format "yyyyMMddHHmmss")
$amount = "100.00"
$secret = "sk_live_xxxxxxxxx"

$raw = "$storeId|$tranId|$amount"

$hmac = New-Object System.Security.Cryptography.HMACSHA256
$hmac.Key = [Text.Encoding]::UTF8.GetBytes($secret)

$signature = ([BitConverter]::ToString(
    $hmac.ComputeHash(
        [Text.Encoding]::UTF8.GetBytes($raw)
    )
)).Replace("-", "").ToLower()

$body = @{
    store_id = $storeId
    api_key = $apiKey
    amount = $amount
    tran_id = $tranId
    currency = "BDT"
    customer_name = "Rahim Uddin"
    customer_mobile = "01700000000"
    customer_email = "rahim@example.com"
    success_url = "https://merchant.com/payment/success"
    failed_url = "https://merchant.com/payment/failed"
    cancel_url = "https://merchant.com/payment/cancel"
    webhook_url = "https://merchant.com/api/payment/webhook"
    signature = $signature
} | ConvertTo-Json -Depth 5

Invoke-RestMethod `
    -Uri "https://nictbd.com/api/payment/create" `
    -Method POST `
    -Body $body `
    -ContentType "application/json"

const crypto = require("crypto");

const storeId = "STORE-2-FRXECLKM";
const apiKey = "pk_live_xxxxxxxxx";
const secret = "sk_live_xxxxxxxxx";

const tranId = "INV" + new Date().toISOString().replace(/\D/g, "").slice(0, 14);
const amount = "100.00";

const raw = `${storeId}|${tranId}|${amount}`;

const signature = crypto
  .createHmac("sha256", secret)
  .update(raw)
  .digest("hex");

const payload = {
  store_id: storeId,
  api_key: apiKey,
  amount: amount,
  tran_id: tranId,
  currency: "BDT",
  customer_name: "Rahim Uddin",
  customer_mobile: "01700000000",
  customer_email: "rahim@example.com",
  success_url: "https://merchant.com/payment/success",
  failed_url: "https://merchant.com/payment/failed",
  cancel_url: "https://merchant.com/payment/cancel",
  webhook_url: "https://merchant.com/api/payment/webhook",
  signature: signature
};

const response = await fetch("https://nictbd.com/api/payment/create", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Accept": "application/json"
  },
  body: JSON.stringify(payload)
});

const result = await response.json();

if (result.status === "success") {
  console.log("Redirect customer to:", result.payment_url);
} else {
  console.log("Payment create failed:", result);
}

import time
import hmac
import hashlib
import requests

store_id = "STORE-2-FRXECLKM"
api_key = "pk_live_xxxxxxxxx"
secret = "sk_live_xxxxxxxxx"

tran_id = "INV" + time.strftime("%Y%m%d%H%M%S")
amount = "100.00"

raw = f"{store_id}|{tran_id}|{amount}"

signature = hmac.new(
    secret.encode("utf-8"),
    raw.encode("utf-8"),
    hashlib.sha256
).hexdigest()

payload = {
    "store_id": store_id,
    "api_key": api_key,
    "amount": amount,
    "tran_id": tran_id,
    "currency": "BDT",
    "customer_name": "Rahim Uddin",
    "customer_mobile": "01700000000",
    "customer_email": "rahim@example.com",
    "success_url": "https://merchant.com/payment/success",
    "failed_url": "https://merchant.com/payment/failed",
    "cancel_url": "https://merchant.com/payment/cancel",
    "webhook_url": "https://merchant.com/api/payment/webhook",
    "signature": signature
}

response = requests.post(
    "https://nictbd.com/api/payment/create",
    json=payload,
    headers={"Accept": "application/json"}
)

result = response.json()

if result.get("status") == "success":
    print("Redirect customer to:", result["payment_url"])
else:
    print("Payment create failed:", result)

require "net/http"
require "json"
require "openssl"
require "time"

store_id = "STORE-2-FRXECLKM"
api_key = "pk_live_xxxxxxxxx"
secret = "sk_live_xxxxxxxxx"

tran_id = "INV" + Time.now.strftime("%Y%m%d%H%M%S")
amount = "100.00"

raw = "#{store_id}|#{tran_id}|#{amount}"

signature = OpenSSL::HMAC.hexdigest(
  "SHA256",
  secret,
  raw
)

payload = {
  store_id: store_id,
  api_key: api_key,
  amount: amount,
  tran_id: tran_id,
  currency: "BDT",
  customer_name: "Rahim Uddin",
  customer_mobile: "01700000000",
  customer_email: "rahim@example.com",
  success_url: "https://merchant.com/payment/success",
  failed_url: "https://merchant.com/payment/failed",
  cancel_url: "https://merchant.com/payment/cancel",
  webhook_url: "https://merchant.com/api/payment/webhook",
  signature: signature
}

uri = URI("https://nictbd.com/api/payment/create")

request = Net::HTTP::Post.new(uri)
request["Content-Type"] = "application/json"
request["Accept"] = "application/json"
request.body = payload.to_json

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == "https") do |http|
  http.request(request)
end

result = JSON.parse(response.body)

if result["status"] == "success"
  puts "Redirect customer to: #{result["payment_url"]}"
else
  puts result
end

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;

public class NictbdPayment {
    public static String hmacSha256(String data, String secret) throws Exception {
        Mac mac = Mac.getInstance("HmacSHA256");
        SecretKeySpec key = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), "HmacSHA256");
        mac.init(key);

        byte[] hash = mac.doFinal(data.getBytes(StandardCharsets.UTF_8));

        StringBuilder hex = new StringBuilder();

        for (byte b : hash) {
            hex.append(String.format("%02x", b));
        }

        return hex.toString();
    }

    public static void main(String[] args) throws Exception {
        String storeId = "STORE-2-FRXECLKM";
        String apiKey = "pk_live_xxxxxxxxx";
        String secret = "sk_live_xxxxxxxxx";

        String tranId = "INV" + System.currentTimeMillis();
        String amount = "100.00";

        String raw = storeId + "|" + tranId + "|" + amount;
        String signature = hmacSha256(raw, secret);

        String json = """
        {
          "store_id": "%s",
          "api_key": "%s",
          "amount": "%s",
          "tran_id": "%s",
          "currency": "BDT",
          "customer_name": "Rahim Uddin",
          "customer_mobile": "01700000000",
          "customer_email": "rahim@example.com",
          "success_url": "https://merchant.com/payment/success",
          "failed_url": "https://merchant.com/payment/failed",
          "cancel_url": "https://merchant.com/payment/cancel",
          "webhook_url": "https://merchant.com/api/payment/webhook",
          "signature": "%s"
        }
        """.formatted(storeId, apiKey, amount, tranId, signature);

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://nictbd.com/api/payment/create"))
            .header("Content-Type", "application/json")
            .header("Accept", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(json))
            .build();

        HttpClient client = HttpClient.newHttpClient();

        HttpResponse response = client.send(
            request,
            HttpResponse.BodyHandlers.ofString()
        );

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Security.Cryptography;
using System.Text;
using System.Threading.Tasks;

class Program
{
    static string HmacSha256(string raw, string secret)
    {
        var key = Encoding.UTF8.GetBytes(secret);

        using var hmac = new HMACSHA256(key);

        var hash = hmac.ComputeHash(Encoding.UTF8.GetBytes(raw));

        return BitConverter.ToString(hash).Replace("-", "").ToLower();
    }

    static async Task Main()
    {
        string storeId = "STORE-2-FRXECLKM";
        string apiKey = "pk_live_xxxxxxxxx";
        string secret = "sk_live_xxxxxxxxx";

        string tranId = "INV" + DateTime.Now.ToString("yyyyMMddHHmmss");
        string amount = "100.00";

        string raw = $"{storeId}|{tranId}|{amount}";
        string signature = HmacSha256(raw, secret);

        string json = $@"
        {{
            ""store_id"": ""{storeId}"",
            ""api_key"": ""{apiKey}"",
            ""amount"": ""{amount}"",
            ""tran_id"": ""{tranId}"",
            ""currency"": ""BDT"",
            ""customer_name"": ""Rahim Uddin"",
            ""customer_mobile"": ""01700000000"",
            ""customer_email"": ""rahim@example.com"",
            ""success_url"": ""https://merchant.com/payment/success"",
            ""failed_url"": ""https://merchant.com/payment/failed"",
            ""cancel_url"": ""https://merchant.com/payment/cancel"",
            ""webhook_url"": ""https://merchant.com/api/payment/webhook"",
            ""signature"": ""{signature}""
        }}";

        using var client = new HttpClient();

        var content = new StringContent(json, Encoding.UTF8, "application/json");

        var response = await client.PostAsync("https://nictbd.com/api/payment/create", content);

        var result = await response.Content.ReadAsStringAsync();

        Console.WriteLine(result);
    }
}

package main

import (
    "bytes"
    "crypto/hmac"
    "crypto/sha256"
    "encoding/hex"
    "fmt"
    "net/http"
    "time"
)

func hmacSha256(raw string, secret string) string {
    h := hmac.New(sha256.New, []byte(secret))
    h.Write([]byte(raw))
    return hex.EncodeToString(h.Sum(nil))
}

func main() {
    storeId := "STORE-2-FRXECLKM"
    apiKey := "pk_live_xxxxxxxxx"
    secret := "sk_live_xxxxxxxxx"

    tranId := "INV" + time.Now().Format("20060102150405")
    amount := "100.00"

    raw := storeId + "|" + tranId + "|" + amount
    signature := hmacSha256(raw, secret)

    jsonBody := fmt.Sprintf(`{
        "store_id": "%s",
        "api_key": "%s",
        "amount": "%s",
        "tran_id": "%s",
        "currency": "BDT",
        "customer_name": "Rahim Uddin",
        "customer_mobile": "01700000000",
        "customer_email": "rahim@example.com",
        "success_url": "https://merchant.com/payment/success",
        "failed_url": "https://merchant.com/payment/failed",
        "cancel_url": "https://merchant.com/payment/cancel",
        "webhook_url": "https://merchant.com/api/payment/webhook",
        "signature": "%s"
    }`, storeId, apiKey, amount, tranId, signature)

    req, _ := http.NewRequest(
        "POST",
        "https://nictbd.com/api/payment/create",
        bytes.NewBuffer([]byte(jsonBody)),
    )

    req.Header.Set("Content-Type", "application/json")
    req.Header.Set("Accept", "application/json")

    client := &http.Client{}
    resp, err := client.Do(req)

    if err != nil {
        panic(err)
    }

    defer resp.Body.Close()

    fmt.Println("Payment create request sent.")
}