Preview a QR code's decode and classification

curl --request POST \
  --url https://prod-api.stableyard.fi/v2/payments/decode-qr \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "sender": {
    "accountId": "acct_sender"
  },
  "country": "PH",
  "qrPayload": "00020101021127590012com.p2pqrpay..."
}
'

import requests

url = "https://prod-api.stableyard.fi/v2/payments/decode-qr"

payload = {
    "sender": { "accountId": "acct_sender" },
    "country": "PH",
    "qrPayload": "00020101021127590012com.p2pqrpay..."
}
headers = {
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    sender: {accountId: 'acct_sender'},
    country: 'PH',
    qrPayload: '00020101021127590012com.p2pqrpay...'
  })
};

fetch('https://prod-api.stableyard.fi/v2/payments/decode-qr', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://prod-api.stableyard.fi/v2/payments/decode-qr",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'sender' => [
        'accountId' => 'acct_sender'
    ],
    'country' => 'PH',
    'qrPayload' => '00020101021127590012com.p2pqrpay...'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Basic <encoded-value>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://prod-api.stableyard.fi/v2/payments/decode-qr"

	payload := strings.NewReader("{\n  \"sender\": {\n    \"accountId\": \"acct_sender\"\n  },\n  \"country\": \"PH\",\n  \"qrPayload\": \"00020101021127590012com.p2pqrpay...\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Basic <encoded-value>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://prod-api.stableyard.fi/v2/payments/decode-qr")
  .header("Authorization", "Basic <encoded-value>")
  .header("Content-Type", "application/json")
  .body("{\n  \"sender\": {\n    \"accountId\": \"acct_sender\"\n  },\n  \"country\": \"PH\",\n  \"qrPayload\": \"00020101021127590012com.p2pqrpay...\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://prod-api.stableyard.fi/v2/payments/decode-qr")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Basic <encoded-value>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"sender\": {\n    \"accountId\": \"acct_sender\"\n  },\n  \"country\": \"PH\",\n  \"qrPayload\": \"00020101021127590012com.p2pqrpay...\"\n}"

response = http.request(request)
puts response.read_body

{
  "payable": false,
  "merchant": {
    "displayName": "Alex Sample",
    "country": "PH",
    "business": false
  },
  "accountNumber": "000000000001",
  "qrInfo": {
    "country": "PH",
    "currency": "PHP",
    "amount": null,
    "txId": "scan_reference_123",
    "merchant": "Alex Sample",
    "beneficiaryName": "Alex Sample",
    "bank": {
      "code": "EXAMPLE_BANK_PH",
      "name": "Example Bank"
    },
    "amountUsd": null,
    "fee": null
  },
  "manualBankTransfer": {
    "accountNumber": "000000000001",
    "bankCode": "EXAMPLE_BANK_PH",
    "accountHolderName": "Alex Sample"
  }
}

Payments

Decode a QR code

Decode an External QR without creating a Payment, reserving a priced quote, or changing Stableyard financial state. Returns the same nullable qrInfo fields for all supported routes, including PH/KE and VN. Existing payable, merchant, manualBankTransfer, providerReferenceId and destinationAmount fields remain available. QR amountUsd and fee are indicative provider decode metadata, not the binding payment quote or combined Stableyard fees; use POST /v2/payments for funding amounts and funding.totalFees. Missing decoded values are null, never assumed zero. A zero sentinel on a classified static/personal QR becomes null unless explicitly dynamic; actual Payments still require a positive amount. The request accepts only sender, country and qrPayload. QR rejection returns 400; invalid upstream responses return 502; transient provider failures return 503. payable describes destination classification, not approval to move funds. The sender UPA must already have an active account link for the selected provider route. QR contents and decoded account numbers are sensitive; do not log or persist raw decode responses.

POST

payments

decode-qr

Preview a QR code's decode and classification

curl --request POST \
  --url https://prod-api.stableyard.fi/v2/payments/decode-qr \
  --header 'Authorization: Basic <encoded-value>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "sender": {
    "accountId": "acct_sender"
  },
  "country": "PH",
  "qrPayload": "00020101021127590012com.p2pqrpay..."
}
'

import requests

url = "https://prod-api.stableyard.fi/v2/payments/decode-qr"

payload = {
    "sender": { "accountId": "acct_sender" },
    "country": "PH",
    "qrPayload": "00020101021127590012com.p2pqrpay..."
}
headers = {
    "Authorization": "Basic <encoded-value>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Basic <encoded-value>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    sender: {accountId: 'acct_sender'},
    country: 'PH',
    qrPayload: '00020101021127590012com.p2pqrpay...'
  })
};

fetch('https://prod-api.stableyard.fi/v2/payments/decode-qr', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://prod-api.stableyard.fi/v2/payments/decode-qr",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'sender' => [
        'accountId' => 'acct_sender'
    ],
    'country' => 'PH',
    'qrPayload' => '00020101021127590012com.p2pqrpay...'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Basic <encoded-value>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://prod-api.stableyard.fi/v2/payments/decode-qr"

	payload := strings.NewReader("{\n  \"sender\": {\n    \"accountId\": \"acct_sender\"\n  },\n  \"country\": \"PH\",\n  \"qrPayload\": \"00020101021127590012com.p2pqrpay...\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Basic <encoded-value>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://prod-api.stableyard.fi/v2/payments/decode-qr")
  .header("Authorization", "Basic <encoded-value>")
  .header("Content-Type", "application/json")
  .body("{\n  \"sender\": {\n    \"accountId\": \"acct_sender\"\n  },\n  \"country\": \"PH\",\n  \"qrPayload\": \"00020101021127590012com.p2pqrpay...\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://prod-api.stableyard.fi/v2/payments/decode-qr")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Basic <encoded-value>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"sender\": {\n    \"accountId\": \"acct_sender\"\n  },\n  \"country\": \"PH\",\n  \"qrPayload\": \"00020101021127590012com.p2pqrpay...\"\n}"

response = http.request(request)
puts response.read_body

{
  "payable": false,
  "merchant": {
    "displayName": "Alex Sample",
    "country": "PH",
    "business": false
  },
  "accountNumber": "000000000001",
  "qrInfo": {
    "country": "PH",
    "currency": "PHP",
    "amount": null,
    "txId": "scan_reference_123",
    "merchant": "Alex Sample",
    "beneficiaryName": "Alex Sample",
    "bank": {
      "code": "EXAMPLE_BANK_PH",
      "name": "Example Bank"
    },
    "amountUsd": null,
    "fee": null
  },
  "manualBankTransfer": {
    "accountNumber": "000000000001",
    "bankCode": "EXAMPLE_BANK_PH",
    "accountHolderName": "Alex Sample"
  }
}

Decode and classify an External QR before creating a Payment. This does not reserve a priced quote or move funds. Use Payment creation for binding funding amounts and fees. QR contents and decoded account numbers are sensitive; do not log or persist raw decode responses.

Authorizations

Authorization

string

header

required

HTTP Basic auth. Username is the Stableyard app ID. Password is the app secret. The optional Stableyard-Version request header must match the environment pin.

Headers

Stableyard-Version

enum<string>

Optional contract-version assertion. Omit it to use the app environment's pinned version. A different supported version is accepted only after that environment is explicitly migrated.

Available options:

2026-09-09

Body

application/json

sender

object

required

Show child attributes

country

string

required

Pattern: ^[A-Z]{2}$

Example:

"PH"

qrPayload

string

required

Required string length: 1 - 4096

Response

QR decode preview

accountNumber

string | null

required

Decoded destination account number when returned; preserve leading zeros. Sensitive data, not a linked bank account or an authorization to pay.

Maximum string length: 64

qrInfo

object

required

Normalized, allowlisted QR display metadata. Keys are always present; unknown values are null. Amounts are exact decimal strings. Decode metadata is not a locked Payment quote.

Show child attributes

payable

boolean

required

False for a personal/peer-to-peer QR classification -- not payable through POST /v2/payments.

merchant

object

required

Show child attributes

manualBankTransfer

object

Present only when payable is false and the provider returned a manual bank-transfer destination.

Show child attributes

providerReferenceId

string

destinationAmount

object

Present only for a dynamic QR that embeds a fixed amount; absent for a static/amount-flexible QR.

Show child attributes

Introduction

Onboarding

Accounts

Money movement

Activity

Vaults

Client & checkout

Platform

Decode a QR code

Authorizations

Headers

Body

Response