{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-guides/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Decrypted Wallet Payloads | xMoney Documentation","description":"Learn how to submit decrypted Apple Pay and Google Pay payment network payloads with xMoney.","llmstxt":{"hide":false,"title":"xMoney Documentation","description":"Guides and API references for integrating xMoney card and crypto payments.","sections":[{"title":"Guides","description":"Integration guides for card payments, crypto, checkout, and dashboard.","includeFiles":["guides/**/*.md"],"excludeFiles":[]},{"title":"Card API","description":"REST API reference and concepts for xMoney card payments.","includeFiles":["api/**/*.md","api/**/*.yaml"],"excludeFiles":[]},{"title":"Crypto API","description":"REST API reference and concepts for xMoney crypto payments.","includeFiles":["crypto_api/**/*.md","crypto_api/**/*.yaml"],"excludeFiles":[]},{"title":"Card Issuing API","description":"Guides and API reference for xMoney whitelabel card issuing partners.","includeFiles":["card_issuing_api/**/*.md","card_issuing_api/**/*.yaml"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"decrypted-wallet-payloads","__idx":0},"children":["Decrypted Wallet Payloads"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["xMoney supports Apple Pay and Google Pay payments where your system sends an external payment network payload that has already been decrypted before the order request reaches xMoney."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use this flow when your platform, payment orchestration provider, or wallet integration performs wallet token decryption and passes the payment network values to xMoney for authorization."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"choose-the-right-wallet-flow","__idx":1},"children":["Choose the right wallet flow"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["xMoney supports two server-side wallet submission patterns:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Flow"},"children":["Flow"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Use when"},"children":["Use when"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Main fields"},"children":["Main fields"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Encrypted wallet token"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["You want xMoney to decrypt the Apple Pay or Google Pay token."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["transactionOption.digitalWallet.walletType"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["transactionOption.digitalWallet.data"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Decrypted wallet payload"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Your system already decrypted the wallet token."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletType"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletRawData"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletCryptogram"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletEci"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletProtocolVersion"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide covers the decrypted wallet payload flow."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"request-fields","__idx":2},"children":["Request fields"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Send decrypted wallet payments through ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/api/reference/order/create-an-order"},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["POST /order"]}]}," with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["transactionMethod"]}," set to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["card"]},"."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Field"},"children":["Field"]},{"$$mdtype":"Tag","name":"th","attributes":{"align":"right","data-label":"Required"},"children":["Required"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletType"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Wallet type. Accepted values are ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["googlePay"]}," and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["applePay"]},"."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletRawData"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["JSON string containing the decrypted external payment network payload."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["cardNumber"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Decrypted PAN from the wallet payload."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["cardExpiryDate"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Decrypted card expiry date in ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["MM/YY"]}," format."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletCryptogram"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Wallet cryptogram from the decrypted payload."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletEci"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["ECI from the decrypted wallet payload."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletProtocolVersion"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Wallet protocol version. For Google Pay, this is typically ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["ECv2"]},"."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["cardHolderName"]}]},{"$$mdtype":"Tag","name":"td","attributes":{"align":"right"},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Cardholder name. If omitted, xMoney applies a default cardholder name."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletType"]}," is present, xMoney uses these top-level fields and does not decrypt ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["transactionOption.digitalWallet"]},"."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["cardCvv"]}," is not required for decrypted wallet payments."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"google-pay-example","__idx":3},"children":["Google Pay example"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"bash","header":{"controls":{"copy":{}}},"source":"curl -X POST \"https://api-stage.xmoney.com/order\" \\\n  -H \"Authorization: Bearer YOUR_API_KEY\" \\\n  -H \"Content-Type: application/x-www-form-urlencoded\" \\\n  -d \"amount=10.00\" \\\n  -d \"currency=EUR\" \\\n  -d \"orderType=purchase\" \\\n  -d \"customerId=12345\" \\\n  -d \"transactionMethod=card\" \\\n  -d \"cardTransactionMode=authAndCapture\" \\\n  -d \"cardNumber=4111111111111111\" \\\n  -d \"cardExpiryDate=12/28\" \\\n  -d \"cardHolderName=Jane Doe\" \\\n  -d \"digitalWalletType=googlePay\" \\\n  -d \"digitalWalletCryptogram=AgAAAAAAAIR8CQrXcIhbQAAAAAA=\" \\\n  -d \"digitalWalletEci=05\" \\\n  -d \"digitalWalletProtocolVersion=ECv2\" \\\n  -d \"digitalWalletRawData={\\\"paymentMethodDetails\\\":{\\\"pan\\\":\\\"4111111111111111\\\",\\\"expirationMonth\\\":\\\"12\\\",\\\"expirationYear\\\":\\\"2028\\\",\\\"cryptogram\\\":\\\"AgAAAAAAAIR8CQrXcIhbQAAAAAA=\\\",\\\"eciIndicator\\\":\\\"05\\\"},\\\"protocolVersion\\\":\\\"ECv2\\\"}\" \\\n  -d \"ip=203.0.113.10\"\n","lang":"bash"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For Google Pay, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletRawData"]}," should contain the decrypted payment method details returned by your decryption process, including the PAN, expiry, cryptogram, and ECI when available."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"apple-pay-example","__idx":4},"children":["Apple Pay example"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"bash","header":{"controls":{"copy":{}}},"source":"curl -X POST \"https://api-stage.xmoney.com/order\" \\\n  -H \"Authorization: Bearer YOUR_API_KEY\" \\\n  -H \"Content-Type: application/x-www-form-urlencoded\" \\\n  -d \"amount=10.00\" \\\n  -d \"currency=EUR\" \\\n  -d \"orderType=purchase\" \\\n  -d \"customerId=12345\" \\\n  -d \"transactionMethod=card\" \\\n  -d \"cardTransactionMode=authAndCapture\" \\\n  -d \"cardNumber=4111111111111111\" \\\n  -d \"cardExpiryDate=12/28\" \\\n  -d \"cardHolderName=Jane Doe\" \\\n  -d \"digitalWalletType=applePay\" \\\n  -d \"digitalWalletCryptogram=AgAAAAAAAIR8CQrXcIhbQAAAAAA=\" \\\n  -d \"digitalWalletEci=05\" \\\n  -d \"digitalWalletRawData={\\\"applicationPrimaryAccountNumber\\\":\\\"4111111111111111\\\",\\\"applicationExpirationDate\\\":\\\"281231\\\",\\\"paymentData\\\":{\\\"onlinePaymentCryptogram\\\":\\\"AgAAAAAAAIR8CQrXcIhbQAAAAAA=\\\"},\\\"eci\\\":\\\"05\\\"}\" \\\n  -d \"ip=203.0.113.10\"\n","lang":"bash"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For Apple Pay, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["digitalWalletRawData"]}," should contain the decrypted payment data, including ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["applicationPrimaryAccountNumber"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["applicationExpirationDate"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["paymentData.onlinePaymentCryptogram"]},", and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["eci"]}," when available."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"response-handling","__idx":5},"children":["Response handling"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The create order response follows the standard ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["POST /order"]}," response format. If the wallet transaction requires an additional authentication step, the response includes redirect details."]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"{\n  \"code\": 201,\n  \"message\": \"Created\",\n  \"data\": {\n    \"orderId\": 67890,\n    \"transactionId\": 123456,\n    \"is3d\": 0,\n    \"isRedirect\": false\n  }\n}\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"best-practices","__idx":6},"children":["Best practices"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Send decrypted wallet payloads only from a secure server-side environment."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Do not expose decrypted PAN, cryptogram, or ECI values in browser logs, analytics, or client-side code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Keep using the encrypted ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["transactionOption.digitalWallet"]}," flow when you want xMoney to perform wallet token decryption."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Use ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/payments/network-token-payments"},"children":["Network token payments"]}," when your integration sends a scheme network token directly instead of a wallet payload."]}]}]},"headings":[{"value":"Decrypted Wallet Payloads","id":"decrypted-wallet-payloads","depth":1},{"value":"Choose the right wallet flow","id":"choose-the-right-wallet-flow","depth":2},{"value":"Request fields","id":"request-fields","depth":2},{"value":"Google Pay example","id":"google-pay-example","depth":2},{"value":"Apple Pay example","id":"apple-pay-example","depth":2},{"value":"Response handling","id":"response-handling","depth":2},{"value":"Best practices","id":"best-practices","depth":2}],"frontmatter":{"seo":{"title":"Decrypted Wallet Payloads | xMoney Documentation","description":"Learn how to submit decrypted Apple Pay and Google Pay payment network payloads with xMoney."}},"lastModified":"2026-06-25T12:10:13.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/payments/decrypted-wallet-payloads","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}