Open Banking Gateway
Sandbox only

Mobile wallet · Pakistan

EasyPaisa (Phoenix) API

Telenor EasyPaisa Pakistan — OTP login, profile, balance, transactions, and transfer.

Try in sandbox
6 endpointsFree sandbox

Sandbox · Request

curl · POST /login/request-otp
curl -X POST 'https://www.openbankinggateway.com/api/sandbox/phoenix/login/request-otp' \
  -H 'Content-Type: application/json' \
  --data '{
  "phone": "03001234567"
}'

Illustrative sandbox example. No provider is contacted, no SMS is sent, no funds move, and no credits are charged.

API reference

Know what you can call.

Methods, paths, and parameter rules come from the same catalog that powers the console. Open an endpoint to see its request fields.

Wallet authentication

POST
/login/request-otp

Send the login OTP

Sandbox only

/api/sandbox/phoenix/login/request-otp

POST login/request-otp · Parameter
ParameterTypeRules & handling
phoneRequiredstring

JSON body

Use a wallet you are authorized to access. Live identities must be linked to your site account through wallet login.

  • Format: ^03\d{9}$
POST
/login/verify-otp

Verify the OTP and issue a session token

Sandbox only

/api/sandbox/phoenix/login/verify-otp

POST login/verify-otp · Parameter
ParameterTypeRules & handling
phoneRequiredstring

JSON body

Use a wallet you are authorized to access. Live identities must be linked to your site account through wallet login.

  • Format: ^03\d{9}$
otpRequiredstring

JSON body

Sensitive · never put in URLs

  • Format: ^\d{4,10}$

Account & activity

GET
/profile

Personal information

Sandbox only

/api/sandbox/phoenix/profile

GET profile · Parameter
ParameterTypeRules & handling
tokenRequiredstring

Send in X-OBG-Token

Session token from the login step. Prefer the X-OBG-Token header so it stays out of URLs.

Sensitive · never put in URLs

  • Format: ^[A-Za-z0-9._~+/=-]{8,512}$
GET
/balance

Account balance

Sandbox only

/api/sandbox/phoenix/balance

GET balance · Parameter
ParameterTypeRules & handling
tokenRequiredstring

Send in X-OBG-Token

Session token from the login step. Prefer the X-OBG-Token header so it stays out of URLs.

Sensitive · never put in URLs

  • Format: ^[A-Za-z0-9._~+/=-]{8,512}$
GET
/transaction-history

Transaction history with pagination

Sandbox only

/api/sandbox/phoenix/transaction-history

GET transaction-history · Parameter
ParameterTypeRules & handling
tokenRequiredstring

Send in X-OBG-Token

Session token from the login step. Prefer the X-OBG-Token header so it stays out of URLs.

Sensitive · never put in URLs

  • Format: ^[A-Za-z0-9._~+/=-]{8,512}$
pageNumRequiredinteger

Query parameter

  • Range: 1 … 1000
pageSizeRequiredinteger

Query parameter

  • Range: 1 … 100
accountNoOptionalstring

Query parameter

  • Format: ^\d{6,24}$

Transfers

POST
/send-money

EasyPaisa wallet transfer

Sandbox only

/api/sandbox/phoenix/send-money

Sandbox simulation only. No real money moves; live transfers are not enabled for this integration.

POST send-money · Parameter
ParameterTypeRules & handling
tokenRequiredstring

Send in X-OBG-Token

Session token from the login step. Prefer the X-OBG-Token header so it stays out of URLs.

Sensitive · never put in URLs

  • Format: ^[A-Za-z0-9._~+/=-]{8,512}$
amountRequireddecimal

JSON body

  • Range: 1 … ∞
  • Decimal places: 2
receiverRequiredstring

JSON body

  • Format: ^03\d{9}$
fromAccountRequiredstring

JSON body

  • Format: ^\d{6,24}$
remarkOptionalstring

JSON body

  • Length: 0 … 64

Endpoint identifiers and provider-specific descriptions are kept in English to match the API contract.

Try in sandbox

A request you can inspect.

The console starts in sandbox mode. Use only the public test values there. Switching to Live changes the destination and may use real accounts and funds.

Sandbox

Keep exploration, account access, and billing separate.

From first request to live connection.

  1. Explore without signing in

    Choose an API and use its sandbox with the documented test values. Fixtures do not move money or contact a bank.

  2. Create your gateway account

    Sign in with Google for 1,000 welcome credits and create an API key. This signs you into the website, not a wallet.

  3. Connect when you are ready

    For a supported live API, complete the wallet login separately. Successful live requests cost one credit; failed requests cost none.

1,000 welcome credits · no card

Small start. Clear cost.

$10 buys 10,000 credits. A successful live request uses one credit; failures and sandbox calls use none. Buying credits does not unlock sandbox-only integrations.

Buy 10,000 credits

Integration guide

Bring it into your code.

Sandbox examples use public fixture values. Live examples use placeholders: keep credentials on your server and never commit them.

Sandbox

curl · POST
curl -X POST 'https://www.openbankinggateway.com/api/sandbox/phoenix/login/request-otp' \
  -H 'Content-Type: application/json' \
  --data '{
  "phone": "03001234567"
}'

Sandbox only

Live access not enabled

Contact us to enable access

Live calls for EasyPaisa (Phoenix) are enabled per customer. Sandbox mode stays free and needs no sign-in.

Message us on TelegramContact page

Clear boundaries, before your first request.

A few things worth knowing.

Does the sandbox use real accounts?

No. Sandbox responses are fixtures and use public test credentials. They do not contact a financial provider, send an OTP, or move funds.

Can every API make live requests?

No. Only integrations marked as live have a real upstream. All others are sandbox-only and return LIVE_ACCESS_NOT_ENABLED in live mode. Contact us to discuss access.

When is a credit charged?

One credit is charged for a successful live call. Failed calls and sandbox calls are free. Check X-Credits-Charged rather than HTTP status alone. If X-OBG-Settlement: unknown is present, billing is unresolved: X-Credits-Charged: 0 does not prove that no debit occurred. Check usage and reconcile before retrying.

Does Google sign-in connect my wallet?

No. Google sign-in manages your site account, credits, and API keys. Wallet login is a separate, explicit flow for a supported integration and an account you are authorized to use.

Keep exploring.