---
title: "Create an Order"
method: POST
path: "/api/v2_1/orders"
tags: ["Order"]
---

# Create an Order

`POST /api/v2_1/orders`

## Request

- Base URL: `https://secure.payu.com`
- URL: `https://secure.payu.com/api/v2_1/orders`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/payu-com/apis/payu-gpo-europe-rest-api/docs/api/v2_1/orders/post.ts> (a function with typed inputs; its response is checked against the schema)

Create a new order request.

## Headers

- `Content-Type` string, required
- `Authorization` string, required

## Request body

- object: Parameters for OrderCreateRequest
  - `continueUrl` string, RFC 3986: Address for redirecting the customer after payment is commenced.
  - `notifyUrl` string, RFC 3986: The address for sending notifications
  - `customerIp` string, required: Payer's IP address. Value is accepted in following formats:<ul> <li> **IPv4** - address represented in the dotted decimal format of 4 sets of decimal numbers separated by dots. The decimal number in each and every set is in the range 0 - 255. Example: 1.12.123.255.</li> <li> **IPv6** - address represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets). The groups are separated by colons (:). Example: 2011:0db8:85a3:0101:0101:8a2e:0370:7334.</li></ul>
  - `merchantPosId` string, required: Point of sale ID.
  - `description` string, required: Description of the order.
  - `additionalDescription` string: Additional description of the order.
  - `visibleDescription` string: Order/Payment description visible for Buyer on the PayU payment page.
  - `statementDescription` string: Payment recipient name followed by payment description (order ID, ticket number etc) visible on card statement. The name should be easy to recognize by the cardholder. If field is not provided, static name configured by PayU will be used.
  - `extOrderId` string: ID of an order used in merchant system. Order identifier assigned by the merchant. It enables merchants to find a specific order in their system. This value must be unique within a single POS.
  - `currencyCode` string, required: Currency code compliant with ISO 4217 (e.g EUR).
  - `totalAmount` string, required: Total price of the order in pennies (e.g. 1000 is 10.00 EUR). Applies also to currencies without subunits (e.g. 1000 is 10 HUF).
  - `validityTime` string: Duration for the validity of an order (in seconds), during which time payment must be made. Default value 86400.
  - `cardOnFile` 'FIRST' | 'STANDARD_CARDHOLDER' | 'STANDARD_MERCHANT': Information about party initializing order or a transaction with Buyer consent to save card token. "cardOnFile" parameter cannot be used with "recurring" parameter.
  - `recurring` 'FIRST' | 'STANDARD': Marks the order as recurring payment: <ul> <li><b>FIRST</b> - payment initialized by the card owner who agreed to save card for future use in recurring plan. You can expect full authentication (3D Secure and/or CVV). If you want to use multi-use token (TOKC_) later, you have to be confident, that first recurring payment was successful.</li> <li><b>STANDARD</b> - subsequent recurring payment (user is not present). This transaction has multi use token (TOKC_). You cannot use it if FIRST recurring payment failed.</li> </ul> <b><code>recurring</code> parameter cannot be used with <code>cardOnFile</code> parameter</b> .
  - `donation` Donation: Section containing data of donation added to the order.
    - `amount` integer: Donation amount in pennies.
    - `organizationId` string: Charity identifier provided by PayU.
  - `buyer` Buyer: Section containing buyer data.
    - `extCustomerId` string: ID of the customer used in merchant system
    - `email` string: Buyer's email address. **Required for Installments (PL), Pay Later (PL), Pay Later with Twisto (CZ), 3DS 2 authentication.**
    - `phone` string: Buyer's telephone number. Please use +[country code] [number] format. **Required for Pay Later with Twisto (CZ), 3DS 2 authentication.**
    - `firstName` string: Buyer's first name. </br>**Required for Pay Later with Twisto (CZ) and AFT card authorization (Account Funding Transaction)** </br></br>**In case of AFT card authorization you have to use ISO/IEC 8859-1 encoding**.
    - `lastName` string: Buyer's last name. </br>**Required for Pay Later with Twisto (CZ) and AFT card authorization (Account Funding Transaction)**</br></br>**In case of AFT card authorization you have to use ISO/IEC 8859-1 encoding**.
    - `nin` string: National Identification Number
    - `language` string: Language code, ISO-639-1 compliant. Denotes the language version of PayU hosted payment page and of e-mail messages sent from PayU to the payer.
    - `birthDate` string, ISO 8601: Buyer's date of birth. **Required for AFT card authorization (Account Funding Transaction)**.
    - `delivery` Delivery: Section containing delivery address. For a list of parameters, see section delivery
      - `street` string: Full street address, incl. apartment number. <b>Section recommended for the 3DS 2 authentication</b>.
      - `postalBox` string: Postal box
      - `postalCode` string: Postal code. <b>Section recommended for the 3DS 2 authentication</b>.
      - `city` string: City, <b>section recommended for the 3DS 2 authentication</b>.
      - `state` string: Country principal subdivision like "state" or "province". If provided, must be a valid ISO 3166-2 code (e.g. "UT" for Utah in the USA or "30" for "Wielkopolskie" in Poland). <b>Section recommended for the 3DS 2 authentication</b>.
      - `countryCode` string: Two-letter country code compliant with <b><a href="https://www.iso.org/iso-3166-country-codes.html">ISO-3166</a></b>. <b>Section recommended for the 3DS 2 authentication</b>.
      - `name` string: Address description
      - `recipientName` string: Recipient name
      - `recipientEmail` string: Ecipient email
      - `recipientPhone` string: Recipient phone number
  - `shoppingCarts` object[]: Array of objects related to transaction identification.
    - `extCustomerId` string, required: Submerchant identifier
    - `amount` number, required: Total amount for given submerchant
    - `fee` string: Marketplace fee. Value should be in range <0, amount>
    - `shippingMethods` object[]: Array of objects related to shipping method.
      - `country` string, required: Two-letter shipping country code compliant with <b><a href="https://www.iso.org/iso-3166-country-codes.html">ISO-3166</a></b>.
      - `price` number, required: Shipping price.
      - `name` string, required: Shipping method name
    - `products` object[], required: Section containing data of the ordered products. Section <code>products</code> is an array of objects of type product.
      - `name` string, required: Name of the product.
      - `unitPrice` string, required: Unit price.
      - `quantity` string, required: Quantity of given product
      - `virtual` boolean: Product type, which can be virtual or material. **Even if sent, the virtual parameter is not returned in PAYU notifications.**
  - `products` object[], required: Section containing data of the ordered products. Section <code>products</code> is an array of objects of type product.
    - `name` string, required: Name of the product.
    - `unitPrice` string, required: Unit price.
    - `quantity` string, required: Quantity of given product
    - `virtual` boolean: Product type, which can be virtual or material. **Even if sent, the virtual parameter is not returned in PAYU notifications.**
  - `payMethods` PayMethods: Section allows to directly invoke payment method. Section <code>payMethods</code> is one object of <code>payMethod</code> type.
    - `payMethod` PayMethod
      - `type` 'PBL' | 'CARD_TOKEN' | 'PAYMENT_WALL' | 'BLIK_AUTHORIZATION_CODE' | 'BLIK_TOKEN' | 'TRANSPARENT', required: Payment method type.
      - `value` string, required: Payment type for PBL, CARD_TOKEN.
      - `clickToPay` union: ClickToPay details. When this node is used, set `type` to `PBL` and `value` to `c`. Provide exactly one option: `visa` or `mastercard` (not both).
        - object
          - `visa` ClickToPayVisa, required: Click to Pay data for Visa.
            - `srcCorrelationId` string, required: A transaction identifier.
        - object
          - `mastercard` ClickToPayMastercard, required: Click to Pay data for Mastercard.
            - `srcCorrelationId` string, required: A transaction identifier.
            - `srcDigitalCardId` string, required: A srcDigitalCardId is a unique identifier that represents the token associated with a card enrolled in Mastercard Checkout Solutions (MCS)
      - `authorizationCode` string: Optional, usage differs depending on payment method. For BLIK integrated transparently: enables to collect 6-digit BLIK code on your website instead of redirecting to BLIK.
      - `authorizationType` 'PRE_AUTHORIZATION' | 'AUTHORIZATION': Applicable only to card-based payments, incl. Apple Pay, Google Pay.
      - `card` CardPlainData
        - `number` string
        - `expirationMonth` string
        - `expirationYear` string
        - `cvv` string
        - `firstTransactionId` string: Only for card data in text form. Identifier of first payment related with storing card for subsequent recurring or card-on-file. Taken from the field of the same name: - order details: `authorization.payTypeDetails.firstTransactionId` or - order's transaction details: `card.cardData.firstTransactionId` Pass it in subsequent MIT payments, when `recurring` is set to **STANDARD** or `cardOnFile` set to **STANDARD_MERCHANT**.
        - `schemeTransactionId` string: Only for card data in text form. Mastercard requires passing additional identifier called Transaction Link Identifier (TLID) of first payment related with storing card for subsequent recurring or card-on-file. Taken from the field of the same name: - order details: `authorization.payTypeDetails.schemeTransactionId` or - order's transaction details: `card.cardData.schemeTransactionId` Pass it in subsequent MIT payments, when `recurring` is set to **STANDARD** or `cardOnFile` set to **STANDARD_MERCHANT**.
      - `specificData` object[]: Additional data for some Visa Checkout integrations.
        - `name` string
        - `value` string
      - `amount` string: Additional information required for Marketplace integration - must be equal to `totalAmount` as sum of amount parameters objects in `shoppingCards` array
      - `blikData` BlikData: Additional data for BLIK payment with T6 or token.
        - `aliasLabelProposal` string: Label proposal associated with given mobile application. This field can be used only during token registration.</br><b>Required for the BLIK Recurring</b>.
        - `registerTokenValue` string: UID/PAYID token value assigned by the merchant. This field can be used only during token registration.
        - `register` boolean: Set to `true` specifies that an alias registration request will be sent. Set to false will result in payment with a T6 authorization code without token registration.
        - `appKey` string: The identifier of the customer's chosen bank mobile application within which the transaction authorization will take place.
        - `recommendedAuthLevel` 'NO_CONFIRMATION' | 'REQUIRED_CONFIRMATION': The proposed level of transaction authorisation. A value of `NO_CONFIRMATION` means no need for transaction confirmation. In case of recurring payments, the value of `NO_CONFIRMATION` means that the merchant is aware of potential fraud risk, accepts it and takes full responsibility for potential fraudulent transactions.
        - `countryCode` 'PL' | 'SK': Indicates the market where the BLIK payment will be initiated. If the field is not provided, the default value will be **PL**.
        - `recurring` object: Contains information about the recurring payment.
          - `type` 'O', required: Type of the recurring payment. <b>Required for the recurring payment.</b>
          - `initializationDate` string, yyyy-MM-dd'T'HH:mm:ssXXX: Date of the first transaction in the recurring payment cycle without the customer confirmation.
          - `expirationDate` string, yyyy-MM-dd'T'HH:mm:ssXXX: Expiration date of the PAYID token. Maximum date is 10 years from the creation date of the token. If the value is not provided, token will be valid indifinitely.
          - `authorizeDespiteRecurringNotSupported` boolean: Indicates if BLIK transaction should be processed even if Buyers bank do not support recurring feature in BLIK payment. <b>In such case, only a single transaction will be processed</b>.
      - `threeDsData` ThreeDsData: Object containing result data from 3DS process.
        - `status3Ds` 'Y' | 'A', required: 3DS status. Following values are allowed to be used:<ul><li><b>Y</b> - successful 3DS2 authentication,</li><li><b>A</b> - 3DS2 authentication attempt.</li></ul>
        - `status3DsDescription` string: Description related to 3DS result. Passing this parameter as a additional description with the MPI will allow better potential customer support from BOK.
        - `xid` string: Unique identifier of 3DS transaction given by the shop. Field required within 3DS version 1 section. This field <b>should not</b> be sent when attempting 3DS2.x authentication. <ul><li><b>[1 .. 20] characters</b> - for value in plain text,</li><li><b>{28} characters</b> - for Base64encoded value,</li><li><b>{40} characters</b> - for HEXencoded value.</li></ul>
        - `dsTransactionId` string, required: Field required within 3DS2.x section. This field should not be sent when attempting 3DS version 1 authentication.
        - `eciCode` unknown
        - `cavv` string: 3DS cryptogram. It should be passed always if the MPI provided this information.
        - `tavv` string: Token Authentication Verification Value (TAVV) from external provider.
      - `sourcePaymentFlow` 'APPLE_PAY' | 'CARDS' | 'MDES' | 'GOOGLE_PAY' | 'VISA_MOBILE' | 'VTS': Indicates digital wallet.
      - `cardInstallments` object: For merchants operating on the Romanian market (Requires contact with a Payu representative first).
        - `provider` string: Card installments program obtained by retrieving [Installments Options](#tag/Card-Installments/operation/retrieve-card-installments).
        - `number` integer: Selected amount of card installments, obtained by [retrieving Installments Options](#tag/Card-Installments/operation/retrieve-card-installments).
  - `mcpData` McpData: Section allows to pass currency conversion details if you chose to use Multi-Currency Pricing.
    - `mcpCurrency` string, required: termCurrency from the rate table.
    - `mcpAmount` string, required: baseCurrency amount converted to termCurrency.
    - `mcpRate` string, required: Applied conversion rate.
    - `mcpFxTableId` string, required: Applied FX rate table id.
    - `mcpPartnerId` string, required: Id provided by PayU.
  - `threeDsAuthentication` ThreeDsAuthentication: Contains optional fields required by 3DS 2 authentication protocol.
    - `challengeRequested` 'YES' | 'NO' | 'MANDATE': Merchant's preference regarding 3DS 2 challenge. Exclusive with exemption. Maybe overridden by PayU.
    - `exemption` Exemption: Merchant's preference regarding SCA exemption to be used to exempt card payment from 3DS authentication. Exclusive with challengeRequested. Requires additional configuration to be enabled.
      - `value` 'LOW_RISK' | 'LOW_VALUE', required: Either LOW_RISK (also known as TRA - transaction risk analysis compliant with SCA requirements has been performed by the merchant) or LOW_VALUE (low value payment, up to 30 EUR or equivalent in other currency)
      - `rejectionHandling` 'PERFORM_AUTHENTICATION' | 'DECLINE', required: Either PERFORM_AUTHENTICATION (PayU will return response with WARNING_CONTINUE_3DS and redirection URL code if exemption cannot be applied) or DECLINE (PayU will decline the payment if exemption cannot be applied - error message will be returned synchronously in OrderCreateResponse)
      - `riskScore` string: Risk score assigned by merchant's antifraud tool. For informative purposes only.
    - `browser` Browser: Browser data required for 3DS 2 browser flow. If not provided, these data will be collected by PayU. It is strongly recommended to include it when charging a stored card (multi-use token), because in some cases it will spare you redirection to PayU's authentication page.
      - `acceptHeaders` string, required: Exact content of the HTTP accept headers as sent from the payer's browser.
      - `requestIP` string, required: IP address of the browser as returned by the HTTP headers.
      - `screenWidth` string, required: Total width of the payer's screen in pixels. Obtained from the screen.width HTML DOM property.
      - `javaEnabled` boolean, required: Obtained from the navigator HTML DOM object.
      - `timezoneOffset` string, required: Obtained from the getTimezoneOffset() method applied to Date object.
      - `screenHeight` string, required: Obtained from the navigator HTML DOM object.
      - `userAgent` string, required: Exact content of the HTTP user-agent header.
      - `colorDepth` string, required: Obtained from payer's browser using the screen.colorDepth HTML DOM property.
      - `language` string, required: Obtained from payer's browser using the navigator.language HTML DOM property. Max. 8 chars.
    - `sdk` Sdk: Required if 3DS 2 is to be natively supported in your mobile app. Content needs to be generated by a certified 3DS 2 SDK. This information is not required, but it is strongly recommended to include it when charging a stored card (multi-use token).
      - `sdkReferenceNumber` string, required
      - `sdkMaxTimeout` string, required: Indicates the maximum amount of time (in minutes) for all exchanges. The field shall have value greater or equal to 05.
      - `sdkAppID` string, required
      - `sdkEncData` string, required: Data encrypted by the 3DS SDK.
      - `sdkTransID` string, required
      - `sdkEphemPubKey` SdkEphemPubKey, required: Public key component of the ephemeral key pair generated by the 3DS SDK and used to establish session keys between the 3DS SDK and the issuer.
        - `y` string
        - `x` string
        - `kty` string
        - `crv` string
    - `merchantRiskIndicator` MerchantRiskIndicator: Set of fields helping to assess risk connected with the order itself (type of goods purchased, shipping method etc.).
      - `orderType` 'PURCHASE' | 'ACC_FUNDING' | 'LOAN'
      - `shipIndicator` 'BILLING_ADDRESS' | 'VERIFIED_ADDRESS' | 'OTHER_ADDRESS' | 'SHIP_TO_STORE' | 'DIGITAL_GOODS' | 'TICKETS' | 'NOT_SHIPPED': Indicates shipping method chosen for the order.
      - `preOrdered` boolean: Indicates order for merchandise with a future availability or release date.
      - `preOrderedDate` string, 2019-03-27T10:57:59.000+01:00: ISO format applies.
      - `deliveryTimeFrame` 'ELECTRONIC' | 'SAME_DAY' | 'OVERNIGHT' | 'TWO_OR_MORE_DAYS'
      - `reordered` boolean: Indicates if the same purchase has been ordered again.
      - `merchantFunds` MerchantFunds: Indicates whether merchant's own funding (e.g. a gift card) has been used to partially pay for the order. Sum of amounts provided here and of <totalAmount> field denote the real value of order in merchant's system.
        - `amount` string, required: In pennies.
        - `currencyCode` string, required: Currency code compliant with ISO 4217.
    - `recurring` Recurring: Additional information in case of a recurring payment.
      - `frequency` string: The minimum number of days between recurring payments (e.g. setting it to <b>7</b> for a weekly cycle). However, according to the recommendations of card schemes, when dealing with recurring payments that have a variable frequency, it's advised to use a value of <b>1</b> for this parameter.
      - `expiry` string, 2025-03-27T00:00:00.000Z: Date after no further recurring payments will be performed. According to recommendation by the card schemes, in cases where there is no established expiry or end date of recurring (e.g. subscriptions), the value of "9999-12-31T00:00:00Z" should be used.
    - `cardholder` Cardholder: Describes cardholder's account data in merchant's possession, including details of account run for the cardholder in merchant's system **You have to use ISO/IEC 8859-1 encoding**.</br></br>You can use this field for providing cardholder name for AFT card authorization (Account Funding Transaction) instead of using buyer's first and last name.
      - `name` string: Cardholder name and surname.
      - `accountInformation` AccountInformation: Informations about cardholders account.
        - `createDate` string, 2019-03-27T10:57:59.000+01:00: Date when the account has been created for the cardholder.
        - `suspiciousActivity` boolean: Indicates whether merchant has experienced suspicious/fraudulent activity for this account.
        - `deliveryAddressFirstUsedDate` string, 2019-03-27T10:57:59.000+01:00: Date when the shipping address used for this order was first used.
        - `deliveryAdressUsageIndicator` 'THIS_TRANSACTION' | 'LESS_THAN_30_DAYS' | '30_TO_60_DAYS' | 'MORE_THAN_60_DAYS': Indicates when this shipping address was first used.
        - `pastOrdersYear` integer: Orders created in merchant's system for this account in the past 12 months.
        - `pastOrdersDay` integer: Orders created in merchant's system for this account in the last 24 hours.
        - `purchasesLastSixMonths` integer: Fulfilled (successful) orders created in merchant's system for this account in the past 6 months.
        - `changeDate` string, 2019-03-27T10:57:59.000+01:00: Date when account details were last changed.
        - `changeIndicator` 'THIS_TRANSACTION' | 'LESS_THAN_30_DAYS' | '30_TO_60_DAYS' | 'MORE_THAN_60_DAYS': Indicates time when account information was last changed.
        - `passwordChanged` string, 2019-03-27T10:57:59.000+01:00: Date when account password was last changed.
        - `passwordChangeIndicator` 'NO_CHANGE' | 'THIS_TRANSACTION' | 'LESS_THAN_30_DAYS' | '30_TO_60_DAYS' | 'MORE_THAN_60_DAYS': Indicates whether and when the password was last changed.
        - `nameToRecipientMatch` boolean: Indicates whether cardholder's name matches recipient's name.
        - `addCardAttemptsDay` string: Indicates attempts to add a card to cardholder's account in merchant's system within last 24 hours.
        - `authMethod` 'GUEST' | 'LOGIN' | 'FEDERATED_ID' | 'THIRD_PARTY' | 'ISSUER' | 'FIDO': Authentication method used to recognize cardholder.
        - `authDateTime` string, 2019-03-27T10:57:59.000+01:00: Date and time when authentication was performed.
        - `cardAddedDate` string, 2019-03-27T10:57:59.000+01:00: Date when card account has been stored with merchant.
        - `cardAddedIndicator` 'GUEST' | 'THIS_TRANSACTION' | 'LESS_THAN_30_DAYS' | '30_TO_60_DAYS' | 'MORE_THAN_60_DAYS': Indicates if and when the card was stored with merchant.
      - `billingAddress` BillingAddress
        - `street` string: Full street address, incl. apartment number.
        - `postalCode` string: Postal/ZIP code.
        - `city` string: City name.
        - `state` string: Country principal subdivision like "state" or "province". If provided, must be a two-letter country code compliant with ISO-3166.
        - `countryCode` string: Two-letter country code compliant with ISO-3166.
  - `riskData` RiskData: Contains optional fields required for risk analysis purposes. **Required for BLIK with authorization code or token.**
    - `browser` Browser, required: Browser data required for 3DS 2 browser flow. If not provided, these data will be collected by PayU. It is strongly recommended to include it when charging a stored card (multi-use token), because in some cases it will spare you redirection to PayU's authentication page.
      - `acceptHeaders` string, required: Exact content of the HTTP accept headers as sent from the payer's browser.
      - `requestIP` string, required: IP address of the browser as returned by the HTTP headers.
      - `screenWidth` string, required: Total width of the payer's screen in pixels. Obtained from the screen.width HTML DOM property.
      - `javaEnabled` boolean, required: Obtained from the navigator HTML DOM object.
      - `timezoneOffset` string, required: Obtained from the getTimezoneOffset() method applied to Date object.
      - `screenHeight` string, required: Obtained from the navigator HTML DOM object.
      - `userAgent` string, required: Exact content of the HTTP user-agent header.
      - `colorDepth` string, required: Obtained from payer's browser using the screen.colorDepth HTML DOM property.
      - `language` string, required: Obtained from payer's browser using the navigator.language HTML DOM property. Max. 8 chars.
  - `credit` Credit: Section containing credit data. This information is not required, but it is strongly recommended to include it. Otherwise the buyer will be prompted to provide missing data on provider page when payment by Installments or Pay later.
    - `shoppingCarts` object[]: Section containing data of the ordered products. Section <credit.shoppingCarts> is an array of objects of type shoppingCart.
      - `shippingMethod` ShippingMethod: Section containing data of shipping method. Section <shippingMethod> is a single object of type shippingMethod.
        - `type` 'COURIER' | 'COLLECTION_POINT_PICKUP' | 'PARCEL_LOCKER' | 'STORE_PICKUP': Type of shipment
        - `price` string: Shipping cost
        - `address` Address: Section containing data about shipping address. Section <shippingMethod.address> is a single object of type address
          - `pointId` string: The full name of the pickup point, including its unique identifier.
          - `street` string: Street name, possibly including house and flat number.
          - `streetNo` string: Street number
          - `flatNo` string: Flat number
          - `postalCode` string: Postal Code
          - `city` string: City
          - `countryCode` string: Two-letter country code compliant with ISO-3166.
      - `products` object[]: Section containing data of the ordered products. Section <code>products</code> is an array of objects of type product.
        - `name` string: Name of the product
        - `unitPrice` string: Unit price
        - `quantity` string: Quantity of
        - `virtual` boolean: Product type, which can be virtual or material.
        - `listingDate` string, 2019-03-27T10:57:59.000+01:00: Marketplace date from which the product (or offer) is available, ISO format applies.
      - `extCustomerId` string: Submerchant identifier. This field should be consistent with field extCustomerId in shoppingCarts section when order is placed in marketplace.
    - `applicant` object: Section containing data of person applying for a credit.
      - `email` string: Applicant's email address
      - `phone` string: Applicant's phone number
      - `firstName` string: Applicant's first name
      - `lastName` string: Applicant's last name
      - `language` string: Language code, ISO-639-1 compliant. Denotes the language version of PayU hosted payment page and of e-mail messages sent from PayU to the payer.
      - `nin` string: National Identification Number
      - `address` object: Section containing data about applican's address.
        - `street` string: Street name, possibly including house and flat number.
        - `streetNo` string: Street number
        - `flatNo` string: Flat number
        - `postalCode` string: Postal Code
        - `city` string: City
        - `countryCode` string: Two-letter country code compliant with ISO-3166.
      - `additionalInfo` object: Additional information about person applying for credit.
        - `hasSuccessfullyFinishedOrderInShop` string: Information whether there were previous, successfully completed orders for applicant.
    - `klarnaAttachment` object: Extra merchant data mandatory for merchants operating in certain segments. You will find more information about this object and its parameters on **[Klarna Documentation Page](https://docs.klarna.com/klarna-payments/additional-resources/use-cases/extra-merchant-data/)**.
      - `content_type` string
      - `body` string
  - `submerchant` Submerchant
    - `id` string: submerchant ID when payment is created by Payment Facilitator for Submerchant
  - `settings` Settings
    - `cardInstallmentsOptions` object: List of allowed installment numbers for any number of specific providers, eg. "OPTIMO": [1, 2, 3]. For merchants operating on the Romanian market (requires contact with a Payu representative first). Available providers: <ul><li>CARD_AVANTAJ</li><li>STAR_BT</li><li>UNICREDIT</li><li>BRD_INSTALLMENTS</li><li>RAIFFEISEN</li><li>GARANTI_RO</li><li>BCR_INSTALLMENTS</li><li>ALPHABANK_INSTALLMENTS</li><li>OPTIMO</li><li>CARD_EMAG</li></ul>
    - `syncProcessing` boolean: If true, order authorization result will be returned synchronously when applicable (e.g., card payments without 3DS authentication, incl. Apple Pay and Google Pay). Available upon request, requires contact with a PayU representative. Note: enabling this setting may increase the response time of the order create request.
    - `enrichNotificationWith` With[]: Additional object to be provided in order details sent in notification: - authorization - authorization details - buyer - buyer details (by default only provided for order in status COMPLETED) - capture - capture details - fees - array of fees associated with the order (transaction fee, chargeback fee etc.) - payMethod - payMethod details (by default only provided for order in status COMPLETED) - mcp - Multi-Currency Pricing details
  - `deviceFingerprint` string: Hashed identifier of the user or its device.

## Response `201`

SUCCESS

- union
  - object
    - `status` object
      - `statusCode` string
    - `orderId` string: Order identifier assigned by PayU.
    - `extOrderId` string: Order identifier assigned by you.
  - object
    - `status` object
      - `statusCode` string
      - `severity` string
    - `orderId` string: Order identifier assigned by PayU.
    - `extOrderId` string: Order identifier assigned by you.
    - `qrCode` string: QR code in base64 encoding.
  - object
    - `status` object
      - `statusCode` string
    - `orderId` string: Order identifier assigned by PayU.
    - `extOrderId` string: Order identifier assigned by you.
    - `authorization` object: Card authorization details.
      - `amount` string
      - `status` 'AUTHORIZED' | 'SOFT_DECLINED' | 'REJECTED' | 'PENDING'
      - `currencyCode` string: Currency code compliant with ISO 4217.
      - `responseCode` string: Response code assigned by PayU.
      - `responseCodeDescription` string: Description of the response code.
      - `validUntil` string, date-time: The date and time until authorization can be captured and order completed.
      - `card` object
        - `maskedNumber` string: Masked card number.
        - `scheme` string: Payment organization: MC (MasterCard/Maestro), VS (Visa).
        - `issuerName` string: Name of the card issuer.
        - `countryCode` string: Country for which the card was issued. Two-letter country code compliant with ISO-3166.
        - `classification` string: Card classification (e.g. DEBIT, CREDIT).
        - `profile` string: Card profile (e.g. CONSUMER, BUSINESS).

## Other responses

- `302`
- `400`
- `401`: Incorrect authentication. Check signature parameters and implementation of the signature algorithm.
- `403`
- `500`

---

[API](https://skmtc.dev/payu-com/apis/payu-gpo-europe-rest-api.md) - [All operations](https://skmtc.dev/payu-com/apis/payu-gpo-europe-rest-api/llms.txt) - [OpenAPI document](https://skmtc.dev/payu-com/apis/payu-gpo-europe-rest-api/revisions/185e74d5e007?raw)
