Skip to main content
Authentication Required for All RequestsEvery single request to this endpoint requires authentication. The Authorization header must be included in:
  • All API requests (cURL, HTTP clients, SDKs)
  • All Postman requests
  • All testing requests
The Authorization header must be in the following format:Authorization: Token <YOUR_API_KEY>Replace <YOUR_API_KEY> with the token provided in the Developers section of the Tonder platform. See Authentication requirements for detailed instructions.
Create a new withdrawal request to send funds to a beneficiary. This endpoint supports both SPEI bank transfers and debit card instant deposits.

​
Request Body

The request requires the following mandatory parameters:
ParameterTypeRequiredDescription
user_idintegerYesUser ID in the Tonder system (get from Get User ID)
amountdecimalYesAmount to withdraw
currencystringYesCurrency code ("MXN" for SPEI transfers)
transfer_methodstringYesTransfer method: "SPEI" or "DEBIT_CARD"
beneficiary_accountstringYesAccount number (18-digit CLABE for SPEI, 16-digit card for DEBIT_CARD)
beneficiary_namestringYesFull name of the beneficiary
beneficiary_rfcstringConditionalRFC identification. Required for SPEI. For DEBIT_CARD, use beneficiary_rfc, beneficiary_curp, or "ND"
beneficiary_curpstringConditionalCURP identification. Alternative to beneficiary_rfc for DEBIT_CARD only
beneficiary_institutionstringYesInstitution code (use 97846 for testing)
interbank_codestringYesOriginator account (CLABE) - required for SPEI
fee_modelstringYesFee model: 00 (User pays) or 01 (Merchant pays)
metadataobjectYesAdditional information (must include latitude and longitude)
emailstringNoContact email for notifications
descriptionstringNoTransaction description

​
Response

On success, returns HTTP 200 with the withdrawal object including complete account data and metadata: 
{
  "id": "40f19a6b-4ce4-424e-92fe-1b564c07dbd7",
  "user_id": "1",
  "business_id": "21",
  "currency": "MXN",
  "amount": 100.0,
  "status": "PENDING",
  "account_data": {
    "cuenta_ordenante": "646180567300000006",
    "nombre_ordenante": "TRES_COMAS",
    "rfc_curp_ordenante": "ND",
    "cuenta_beneficiario": "846180000400000001",
    "nombre_beneficiario": "Fabio",
    "rfc_curp_beneficiario": "ND",
    "institucion_contraparte": "97846",
    "tipo_cuenta_beneficiario": 40,
    "email": "[email protected]",
    "concepto_pago": "test"
  },
  "status_changes": [],
  "action": null,
  "metadata": {
    "latitude": "22.8870221",
    "longitude": "-109.911775",
    "operation_date": "2024-01-15",
    "customer_email": "[email protected]",
    "business_user": "admin_user_001",
    "customer_id": "CUST_12345",
    "order_id": "ORDER_ABC_789"
  },
  "created_at": "2025-10-02T01:09:37.371365Z",
  "modified_at": "2025-10-02T01:09:37.371365Z",
  "provider_reference": "PENDING",
  "transfer_method": "SPEI",
  "fixed_fee": "3.5",
  "tax": "16.0",
  "fee_amount": null
}

​
Transfer Methods

​
SPEI

Bank transfers processed same business day during banking hours. Requirements:
  • beneficiary_account must be a valid 18-digit CLABE
  • Processing occurs during banking hours (typically 9 AM - 5 PM MXT, Monday-Friday)

​
DEBIT_CARD

Instant deposits available within 5-15 minutes, 24/7. Requirements:
  • beneficiary_account must be a valid 16-digit debit card number
  • Processing occurs 24/7, including weekends and holidays

​
Fee Models

  • 00: User pays fees - fees are deducted from the withdrawal amount
  • 01: Merchant pays fees - fees are charged separately to the merchant

​
Metadata Requirements

For SPEI/MXN withdrawals, the metadata object must include:
  • latitude: Geographic latitude (decimal number)
  • longitude: Geographic longitude (decimal number)
These coordinates are required for compliance and fraud prevention.

​
Testing

When testing in the Stage environment, use institution code 97846 for the beneficiary_institution field.