Payment infrastructure built for Africa's internet economy.
One API for mobile money, cards, and bank transfers. Bank-grade encryption, real-time fraud scoring, and same-day settlement — integrate in an afternoon, scale to millions of transactions.
- No setup or monthly fees
- PCI DSS Level 1 certified
- Same-day settlement
dashboard.xerinpay.com
TLS 1.3Volume today
TZS 8,412,930
Live transactions
streamingSettling for 4,000+ businesses across 14 markets
Everything you need to move money
A complete payments stack — collections, payouts, reconciliation, and reporting — without stitching together five vendors.
Every local payment method
M-Pesa, Airtel Money, MTN MoMo, cards, and direct bank debits behind a single charge object. Add a market without touching your checkout.
Same-day settlement
Funds land in your bank or wallet the same working day — with a full ledger you can reconcile line by line.
Subscriptions & billing
Recurring charges, retries, proration, and dunning handled for you, including mobile-money mandates.
Payouts & split payments
Pay suppliers, riders, or marketplace sellers in bulk. Split a single charge across many recipients atomically.
Reliable webhooks
Signed, idempotent, and retried with exponential backoff for 72 hours. Replay any event from the dashboard.
Analytics that matter
Authorisation rates, failure reasons, cohort revenue, and settlement timing — live, not batched overnight.
Multi-currency
Accept in 32 currencies, settle in the one you hold. Mid-market FX with the spread shown up front.
Plugins & no-code
WooCommerce, Shopify, and payment links for teams that would rather not write a line of code.
From signup to settlement in four steps
No lengthy onboarding calls, no integration consultants. Read the docs, ship the integration, take payments.
STEP 01
Create an account
Sign up and get sandbox keys instantly. Full API access before any paperwork — test with simulated M-Pesa and card flows.
STEP 02
Connect the API
Drop in a checkout, use a hosted payment page, or call the REST API directly. SDKs for Node, Python, PHP, Go, and Java.
STEP 03
Go live in days
Submit KYB documents through the dashboard. Most businesses are approved and taking live payments within 48 hours.
STEP 04
Get settled
Track every charge, refund, and payout in one ledger. Money reaches your account the same working day.
Security is the product, not a feature
XerinPay is built to the standards regulators and acquiring banks audit us against — and we hand you the same controls for your own account.
99.995%
Platform uptime, 12-month rolling
40ms
Median fraud decision time
0.008%
Fraud-to-volume ratio
24/7
Security operations centre
Encrypted end to end
TLS 1.3 in transit, AES-256-GCM at rest, and per-tenant data keys rotated automatically. Card data never touches your servers.
- TLS 1.3 only
- AES-256-GCM
- Automatic key rotation
Keys held in HSMs
Cryptographic material lives in FIPS 140-2 Level 3 hardware modules. No engineer — ours or yours — can export a private key.
- FIPS 140-2 L3
- Dual-control access
- Zero key export
Tokenised vault
Real PANs are replaced with reversible tokens scoped to your account, so a leaked token is worthless anywhere else.
- Network tokenisation
- Scoped tokens
- PAN never stored
Fraud scoring in 40ms
Every charge is scored by a model trained on regional fraud patterns — device fingerprint, velocity, BIN risk, and behavioural signals.
- Device fingerprinting
- Velocity rules
- Adaptive 3-D Secure
AML & sanctions screening
Counterparties are screened against global sanctions and PEP lists in real time, with case management built into the dashboard.
- Real-time screening
- PEP & adverse media
- Audit-ready cases
Immutable audit trail
Every API call, dashboard action, and permission change is written to a tamper-evident log you can export or stream to your SIEM.
- Append-only log
- SIEM streaming
- 7-year retention
Controls you hold yourself
Most breaches start with an account, not an algorithm. Every control below is available on the free tier — no enterprise upsell for basic safety.
Passkeys & WebAuthn
Phishing-resistant sign-in for every dashboard user.
Enforced 2FA
TOTP or hardware keys, mandatory org-wide.
Granular RBAC
Scope each teammate to the exact resources they need.
IP allowlisting
Restrict live API keys to your own egress ranges.
Signed webhooks
HMAC-SHA256 signatures with replay protection.
Idempotency keys
Retry safely — a customer is never charged twice.
Audited, certified, and independently tested
Annual penetration tests by an accredited third party, a public bug bounty, and quarterly ASV scans — reports available under NDA.
- PCI DSS Level 1
- SOC 2 Type II
- ISO 27001
- GDPR
- Tanzania PDPA 2022
- PSD2 / SCA
An API you can read in one sitting
Predictable resources, honest error messages, and idempotency on every mutating call. The kind of API you stop thinking about.
First charge in 10 minutes
Sandbox keys the moment you sign up, with simulated M-Pesa prompts and test cards for every failure path.
SDKs that stay current
Node, Python, PHP, Go, Java, and Flutter — typed, versioned, and generated from the same OpenAPI spec as our docs.
Deterministic testing
Trigger any webhook by hand, replay historical events, and pin your integration to a dated API version.
curl https://api.xerinpay.com/v1/charges \
-H "Authorization: Bearer $XERINPAY_SECRET_KEY" \
-H "Idempotency-Key: 8f21c4ae-0b19" \
-d amount=4500 \
-d currency=TZS \
-d method=mpesa \
-d "customer[phone]=+254712345678"0+
Businesses live on XerinPay
TZS 0B
Processed in the last year
0
Markets across the continent
0.000%
Uptime, 12-month rolling
Pay per transaction. Nothing else.
No setup fees, no monthly minimums, no charge for failed attempts. Card rates start at 2.9% + TZS 15 and fall with volume.
Starter
For new businesses taking their first payments online.
per mobile-money transaction
Start free- No setup or monthly fee
- M-Pesa, Airtel, cards
- Hosted checkout & payment links
- Next-day settlement
- 2FA, passkeys & audit log
- Email support
- Custom settlement schedule
- Dedicated account manager
Growth
For scaling teams that need payouts, subscriptions, and speed.
per mobile-money transaction
Start free- Everything in Starter
- Same-day settlement
- Bulk payouts & split payments
- Subscriptions & smart retries
- IP allowlisting & granular RBAC
- Priority support, 4-hour response
- Dedicated account manager
Enterprise
For platforms and marketplaces at serious scale.
volume-based interchange++
Talk to sales- Everything in Growth
- Interchange++ pricing
- Dedicated infrastructure & SLA
- SIEM log streaming & SSO/SAML
- Named account manager
- Compliance & audit support
All plans include PCI DSS Level 1 processing, fraud scoring, signed webhooks, and the full audit log. Rates shown exclude VAT.
Teams that ship, ship on XerinPay
From single-founder stores to platforms settling millions a month.
“We moved off two separate providers and cut our failed-payment rate by a third in the first month. The webhook reliability alone paid for the migration.”
“The sandbox is the best I've used in this region. I had a working M-Pesa flow before lunch, including the failure cases I actually needed to handle.”
“Our auditors asked for the audit trail and SOC 2 report and we sent both the same day. That has never happened with a payments vendor before.”
Questions we get asked most
Still unsure about something? The docs go deeper, and support answers in hours, not days.
Take your first payment today
Sandbox keys in seconds, live in 48 hours. No setup fee, no monthly minimum, no contract to sign before you write a line of code.
PCI DSS Level 1 · SOC 2 Type II · ISO 27001 certified