Customer API Documentation
Base URL: https://columbiamoneypay.com
Last Updated: March 25, 2026
The Columbia Pay API enables customers to perform deposit, withdrawal, and transaction status inquiry operations.
Hash is an encrypted key that proves your transaction is secure. With hash, your transaction is securely transmitted, no one can perform transactions on your behalf, and the system can verify that the transaction is authentic.
/deposit/{ terminalid }Customer is redirected to this URL to initiate a deposit request.
Bank Methods
Crypto Methods
https://columbiamoneypay.com/deposit/demobahis?amount=500.00&payment_name=havale/api/withdrawCustomer submits a withdrawal request via the API.
Step 1: Write the parameters
API Key: pk_live_abc123
Transaction ID: CKM20260325001
Username: user123
Full Name: John Smith
Amount: 500.00
Secret Key: sk_live_xyz789
Step 2: Concatenate (no spaces)
pk_live_abc123CKM20260325001user123John Smith500.00sk_live_xyz789
Step 3: Encrypt with SHA256
d4f2c3a1b5e7f9d2a4c6e8f0b2d4a6c8e0f2b4d6a8c0e2f4b6d8a0c2e4f6b
/api/transaction/status/{ terminalid }/{ islemid }Query transaction status with a simple GET request without hash.
/api/status-checkUse POST method to securely query transaction status with hash.
SHA256(apiKey + islemid + secretKey)
const crypto = require('crypto');
const fetch = require('node-fetch');
const apiKey = 'pk_live_abc123';
const secretKey = 'sk_live_xyz789';
const hashString = apiKey + islemid + tuser + tadsoyad + amount + secretKey;
const hash = crypto.createHash('sha256').update(hashString).digest('hex');
const response = await fetch('https://columbiamoneypay.com/api/withdraw', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
terminalid, tuser, tadsoyad, amount, islemid,
payment_name, cekim_iban, hash
})
});Always keep your secret keys confidential. Use HTTPS for all requests. Never expose API keys in client-side code.
Each transaction must have a unique ID. Duplicate IDs will be rejected by the system.
Amount should be sent as a string with decimal point (e.g: "500.00"). Always use two decimal places.
API requests must be made from your server. Client-side requests will be blocked by CORS policy.
Columbia Pay API v3.7 • Last Updated: March 25, 2026