Query payout

POST/pay-out/inquiryTry it in Swagger →

Sandbox https://test.lintaspay.xyz/pay-out/inquiry · Production https://lintaspay.xyz/pay-out/inquiry

Returns the latest status of a payout. Use it to confirm any payout whose outcome you have not seen.

Payout final-state rule. Only orderStatus 4 (success) and 5 (failed) are final. Treat anything else — including timeouts — as processing. Read the rule →

Request

Headers

Header	Required	Value
`Content-Type`	required	`application/json`
`Authorization`	required	`LINTASPAY-SHA256withRSA app_id=…,nonce=…,timestamp=…,sign=…` — see Signing requests
`lintaspay-request-id`	required	Unique request id, `[A-Za-z0-9_-]`, max 64

Body parameters

Name	Type	Required	Description
`nonceStr`	string	required	Random string, max 64 chars. Max length 64. Example: `5f1c2a9e8b7d4c3a`
`orderNo`	string	optional	LintasPay order number returned by create. Example: `LPIN2026101410300512AB34CD56EF`
`mchOrderNo`	string	optional	Your order number. Example: `M202610140001`

Example

{
  "nonceStr": "5f1c2a9e8b7d4c3a",
  "orderNo": "LPIN2026101410300512AB34CD56EF"
}

Response

HTTP 200 with the envelope {"code", "message", "data"}. code = 0 means success; otherwise data is null and code is an error code. Authentication failures return HTTP 401 (403 for a blocked IP, 429 when rate-limited). Always verify the response signature.

`data` fields

Name	Type	Description
`merchantId`	integer	Example: `100001`
`mchOrderNo`	string	Example: `P202610140001`
`orderNo`	string	Example: `LPOUT2026101410300512AB34CD56EF`
`amount`	string	Example: `10000.00`
`fee`	string	Example: `6500.00`
`orderStatus`	integer	`1` created, `2` routing, `3` processing, `4` success (final), `5` failed (final). Example: `4`
`completionTime`	string	Example: `2026-10-14T10:42:28+07:00`
`failedReason`	string	Reason when `orderStatus = 5`.

Examples

{
  "code": 0,
  "message": "success",
  "data": {
    "merchantId": 100001,
    "mchOrderNo": "P202610140001",
    "orderNo": "LPOUT2026101410300512AB34CD56EF",
    "amount": "10000.00",
    "fee": "6500.00",
    "orderStatus": 4,
    "completionTime": "2026-10-14T10:42:28+07:00",
    "failedReason": ""
  }
}

{
  "code": 10011304,
  "message": "Signature verification failed",
  "data": null
}

Code samples

URL_PATH=/pay-out/inquiry
BODY='{"nonceStr":"5f1c2a9e8b7d4c3a","orderNo":"LPIN2026101410300512AB34CD56EF"}'
AUTH="app_id=$APP_ID,nonce=$(openssl rand -hex 16),timestamp=$(date +%s)000"
SIGN=$(printf '%s\nPOST\n%s\n%s\n' "$AUTH" "$URL_PATH" "$BODY" \
  | openssl dgst -sha256 -sign merchant_private_key.pem | base64 | tr -d '\n')

curl -sS -X POST "https://test.lintaspay.xyz$URL_PATH" \
  -H 'Content-Type: application/json' \
  -H "Authorization: LINTASPAY-SHA256withRSA $AUTH,sign=$SIGN" \
  -H "lintaspay-request-id: $(openssl rand -hex 16)" \
  -d "$BODY"

// call() is defined on the Signing requests page
const res = await call('/pay-out/inquiry', {
  "nonceStr": "5f1c2a9e8b7d4c3a",
  "orderNo": "LPIN2026101410300512AB34CD56EF"
});
if (res.code !== 0) throw new Error(`${res.code} ${res.message}`);
console.log(res.data);

# call() is defined on the Signing requests page
res = call("/pay-out/inquiry", {
  "nonceStr": "5f1c2a9e8b7d4c3a",
  "orderNo": "LPIN2026101410300512AB34CD56EF"
})
if res["code"] != 0:
    raise RuntimeError(f"{res['code']} {res['message']}")
print(res["data"])

<?php
// api_call() is defined on the Signing requests page
$res = api_call('/pay-out/inquiry', json_decode('{"nonceStr":"5f1c2a9e8b7d4c3a","orderNo":"LPIN2026101410300512AB34CD56EF"}', true));
if ($res['code'] !== 0) {
    throw new RuntimeException($res['code'] . ' ' . $res['message']);
}
print_r($res['data']);

// ApiClient is defined on the Signing requests page
ApiClient client = new ApiClient();
String body = "{\"nonceStr\":\"5f1c2a9e8b7d4c3a\",\"orderNo\":\"LPIN2026101410300512AB34CD56EF\"}";
String res = client.call("/pay-out/inquiry", body);
System.out.println(res);