Bizum is a widely adopted instant mobile payment solution in Spain, created through the collaboration of local banks. It allows customers to pay directly from their bank account using only a phone number, delivering instant confirmation without exposing card details. Unlike the backend-to-backend [Bizum API Rest](/en/global-api/sep-api/payment-guides-api/apms/bizum-api-rest) integration, this flow generates a redirect: the API response returns a signed URL and form parameters that your backend uses to send the customer to the Bizum payment gateway. The customer completes the payment there and is redirected back to your `callback_url`. The Global API supports Bizum Redirect in two flows:
* **Single-step flow** – authorize and capture the payment in one request using `INSTANT_TRANSFER`.
* **Two-step flow** – validate the customer's Bizum account in one step using `INSTANT_TRANSFER_PREAUTH`, then capture the payment later (within 30 days) when you are ready to fulfill the order.
### 1. Create the Payment Request
Call the [Create – Authorize endpoint](https://docs.globalgetnet.com/en/products/online-payments/regional-api/swagger#tag/payments/post/dpm/payments-gwproxy/v2/payments) with the attributes below.
The table outlines the minimum fields required to create a Bizum single-step payment.
| Attribute | Description | Required value |
| :--------------- | :------------------------------------------------------- | :------------------------------- |
| `payment_method` | Bizum single-step method | `INSTANT_TRANSFER` |
| `callback_url` | Where Bizum redirects the customer after success/cancel | Your HTTPS endpoint |
| `amount` | Transaction amount in cents. Maximum `1500000` (€15,000) | Integer (e.g. `5000` for €50.00) |
| `currency` | ISO currency code | `EUR` |
| `order_id` | Merchant reference for reconciliation | Unique string |
The following sample request shows how to initialize a Bizum single-step payment.
```bash
curl --request POST \
--url https://api-sbx.globalgetnet.com/dpm/payments-gwproxy/v2/payments \
--header 'authorization: Bearer 
### 1. Validate the Payment
Send the same endpoint request but set `payment_method = INSTANT_TRANSFER_PREAUTH`.
The next table lists the key attributes needed for the validation request.
| Attribute | Type | Required | Description |
| :---------------------------------- | :------------ | :------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| `idempotency_key` | String (UUID) | Yes | Unique identifier to ensure the request is processed only once. Use a UUID v4 format. If you retry a request with the same key, the API returns the original result |
| `request_id` | String (UUID) | Yes | Unique identifier for tracking the request. Use a UUID v4 format for better traceability across systems |
| `order_id` | String | Yes | Your unique identifier for the purchase. This is the merchant's reference ID used for reconciliation purposes |
| `data.amount` | Integer | Yes | Transaction amount in cents (minor units). For example, `5000` represents €50.00. Must be a positive integer. Maximum `1500000` (€15,000) |
| `data.currency` | String | Yes | ISO 4217 currency code. Must be `EUR` for Bizum payments as they are only available in Spain |
| `data.customer_id` | String | No | Unique identifier for the customer in your system. Useful for tracking customer payment history |
| `data.payment.payment_method` | String | Yes | Payment method identifier. Must be `INSTANT_TRANSFER_PREAUTH` for Bizum two-step (pre-authorization) payments |
| `data.payment.transaction_type` | String | Yes | Transaction processing type. Must be `FULL` for Bizum as partial payments are not supported |
| `data.additional_data.callback_url` | String (URL) | Yes | HTTPS endpoint where Bizum redirects the customer after they complete or cancel the payment. Must be publicly accessible and use HTTPS protocol |
Here is an example request that validates a Bizum payment.
```bash
curl --request POST \
--url https://api-sbx.globalgetnet.com/dpm/payments-gwproxy/v2/payments \
--header 'authorization: Bearer Redirecting to Payment Gateway
Please wait while we redirect you to complete your BIZUM payment...
## Decoding `merchant_data`
The following Node.js example demonstrates how to retrieve the payment and decode the Base64 `merchant_data` payload.
```bash
// Node.js/Express example
app.get('/payment/callback', async (req, res) => {
const { payment_id } = req.query;
const response = await fetch(
`https://api-sbx.globalgetnet.com/dpm/payments-gwproxy/v2/payments/${payment_id}`,
{
headers: {
'authorization': 'Bearer