# "signature" is computed as described in the Signature Generation Guide.
# This value is the guide's worked example (example signing secret).
curl --request POST \
  --url https://api.c2cpayment.net/api/merchant/orders \
  --header "C2C-API-Key: $C2C_API_KEY" \
  --header "Content-Type: application/json" \
  --header "Idempotency-Key: PAYOUT-20017" \
  --data '{"orderType":"Withdrawal","amount":2000,"currency":"PKR","walletType":"Easypaisa","merchantOrderRef":"PAYOUT-20017","customerReference":"player_12345","customerAccountNumber":"03001234567","callbackUrl":"https://merchant.example.com/webhooks/c2c","signature":"8dddc4abc8aa78744bb29624ac583434"}'

// signBody(): see the Signature Generation Guide
const payload = {
  orderType: 'Withdrawal',
  amount: 2000,
  currency: 'PKR',
  walletType: 'Easypaisa',
  merchantOrderRef: 'PAYOUT-20017',
  customerReference: 'player_12345',
  customerAccountNumber: '03001234567',
  callbackUrl: 'https://merchant.example.com/webhooks/c2c',
};

const response = await fetch(
  'https://api.c2cpayment.net/api/merchant/orders',
  {
    method: 'POST',
    headers: {
      'C2C-API-Key': process.env.C2C_API_KEY,
      'Content-Type': 'application/json',
      'Idempotency-Key': 'PAYOUT-20017',
    },
    body: JSON.stringify({ ...payload, signature: signBody(payload, process.env.C2C_SIGNING_SECRET) }),
  }
);
const { data } = await response.json();
// Persist data.orderId; await the webhook or poll the status

import os, requests

# sign_body(): see the Signature Generation Guide
payload = {
    "orderType": "Withdrawal",
    "amount": 2000,
    "currency": "PKR",
    "walletType": "Easypaisa",
    "merchantOrderRef": "PAYOUT-20017",
    "customerReference": "player_12345",
    "customerAccountNumber": "03001234567",
    "callbackUrl": "https://merchant.example.com/webhooks/c2c",
}

response = requests.post(
    "https://api.c2cpayment.net/api/merchant/orders",
    json={**payload, "signature": sign_body(payload, os.environ["C2C_SIGNING_SECRET"])},
    headers={
        "C2C-API-Key": os.environ["C2C_API_KEY"],
        "Idempotency-Key": "PAYOUT-20017",
    },
)
order_id = response.json()["data"]["orderId"]

{
  "data": {
    "orderId": "d1926af5-053d-4b39-a73b-c82f0d9af656",
    "paymentPageUrl": "https://<payment-page-host>/pay?order_id=d1926af5-053d-4b39-a73b-c82f0d9af656&expires=1791462081&signature=Pq7...",
    "status": "AwaitingMemberPayout",
    "orderReference": "ORD-20261008120621-a7b8",
    "expiresAt": "2026-10-08T12:21:21.717975Z",
    "stage": "Assigned",
    "merchantOrderRef": "PAYOUT-20017"
  }
}

{
  "data": {
    "orderId": "d1926af5-053d-4b39-a73b-c82f0d9af656",
    "paymentPageUrl": "https://<payment-page-host>/pay?order_id=d1926af5-053d-4b39-a73b-c82f0d9af656&expires=1791462081&signature=Pq7...",
    "status": "Awaiting",
    "orderReference": "ORD-20261008120621-a7b8",
    "expiresAt": "2026-10-08T12:21:21.717975Z",
    "stage": "Awaiting",
    "merchantOrderRef": "PAYOUT-20017"
  }
}

{
  "data": {
    "orderId": "d1926af5-053d-4b39-a73b-c82f0d9af656",
    "paymentPageUrl": "https://<payment-page-host>/pay?order_id=d1926af5-053d-4b39-a73b-c82f0d9af656&expires=1791462081&signature=Pq7...",
    "status": "Awaiting",
    "orderReference": "ORD-20261008120621-a7b8",
    "expiresAt": "2026-10-08T12:21:21.717975Z",
    "stage": "Awaiting",
    "merchantOrderRef": "PAYOUT-20017"
  }
}

{
  "error": "CustomerAccountName can only be sent together with CustomerAccountNumber."
}

{
  "error": "JazzCashQR is a deposit-only payment method. A withdrawal's walletType must be one of: JazzCash, Easypaisa, TillID, BankAccount."
}

{
  "success": false,
  "error": "The request body must include a 'signature' field.",
  "code": "SIGNATURE_REQUIRED",
  "traceId": "b7e7de9cb3606f164c88c36419ed8e7b"
}

{
  "error": "Insufficient merchant balance: 510.00 PKR available, 1010.00 PKR required for this withdrawal (amount + fee). 1990.00 PKR is reserved for withdrawals in progress."
}

{
  "error": "Easypaisa withdrawals are disabled for this merchant."
}

{
  "error": "merchantOrderRef 'PAYOUT-20017' is already used by order ORD-20261008120621-a7b8. Reuse the same Idempotency-Key to retry a request, or use a new reference for a new payment."
}