Checkout (OTP) - Payment Behavior

For OTP-based Direct Debit payments, customers must enter the OTP received from their bank to authorize the transaction.

The OTP input can be hosted within the merchant's application. Merchants must then verify the OTP using the Verify OTP API.

Successful API response: Wait for the payment callback to confirm the final transaction status.
HTTP 5xx or timeout: Do not immediately mark the payment as failed. Keep the transaction in a processing state until the final status is confirmed.
Callback not received: Merchants can use the /debit/status API to retrieve the latest transaction status.

Merchants should always rely on the definitive transaction status from the callback or Payment Status API before completing or failing the payment.