APIs

1

Create a payment intention

Every payment starts by calling the Intention Creation API from your backend. You can check it in the Intention APIs section.

This step initializes the payment by defining:

• Amount and currency
• Allowed payment methods
• Your internal order or reference ID

The response includes a reference (client secret) that is used to launch the checkout experience.

2

Display a checkout experience to the customer

Once the intention is created, you present one of Paymob’s checkout experiences:

Unified Checkout (Redirect)

• Customer is redirected to a Paymob-hosted checkout page
• Fastest integration with minimal frontend effort
• Paymob handles UI, validation, and security

Embedded Checkout (Pixel)

• Paymob checkout UI component (Pixel) is embedded inside your website or WebView
• More control over the checkout look and feel
• Sensitive payment data is still handled securely by Paymob

3

Customer completes or cancels the payment

The customer enters their payment details and completes any required authentication (such as 3D Secure). Paymob processes the transaction and determines the final payment status.

4

Callbacks (Webhooks)

After processing the payment, Paymob sends callbacks to your backend to notify you of the payment result and redirects the customer back to your website or app.

Callbacks should be used to:

• Confirm the final payment status
• Update order records
• Trigger business actions (e.g., fulfillment, notifications)
• Redirects are mainly for user experience
• Callbacks are the source of truth for payment status

5

Callback security (HMAC)

Each callback can be authenticated using HMAC verification to ensure it was sent by Paymob and was not altered. Always verify callbacks before trusting their data.