Create a transfer to another account or card
Make a payment to a counterparty. You can choose either a bank transfer or a card transfer. The resulting transaction has the type transfer
.
If you make the payment to another Revolut account, either business or personal, the transaction is executed instantly.
If the counterparty has multiple payment methods available, for example, 2 accounts, or 1 account and 1 card, you must specify the account or card to which you want to transfer the money (receiver.account_id
or receiver.card_id
respectively) .
Due to PSD2 Strong Customer Authentication regulations, the /pay
endpoint is only available for customers on Revolut Business Company plans.
If you're a freelancer and wish to make payments via our API, we advise that you instead leverage our Payment drafts (/payment-drafts
) endpoint.
For more details, see the guides: Send money via bank transfer and Card transfers.
Access Token
Each Business API request must contain an authorization header in the following format to make a call: Bearer <your_access_token>
.
The access token will be obtained the first time you set up your application and has an expiration of 40 minutes.
During setup, a refresh_token
will also be obtained which allows to obtain a new access_token
.
Never share your client-assertion JWT (JSON web token), access_token
and refresh_token
with anyone, as these can be used to access your banking data and initiate transactions.
Access tokens can be issued with four security scopes and require a JWT (JSON Web Token) signature to be obtained:
READ
: Permissions forGET
operations.WRITE
: Permissions to update counterparties, webhooks, and issue payment drafts.PAY
: Permissions to initiate or cancel transactions and currency exchanges.READ_SENSITIVE_CARD_DATA
: Permissions to retrieve sensitive card details.cautionIf you enable the
READ_SENSITIVE_CARD_DATA
scope for your access token, you must set up IP whitelisting. Failing to do so will prevent you from accessing any Business API endpoint.IP whitelisting means that you must specify an IP or a set of IPs which will be the only IPs from which requests to the API will be accepted. To do so:
- Go to the Revolut Business web app settings -> APIs -> Business API.
- Select the corresponding API certificate.
- In Production IP whitelist, provide the IP(s) which should be whitelisted, and save.
To configure your JWT and obtain the refresh and first access tokens, complete the following steps:
Request
Create a transfer
Response
The information about the created transfer