Articles on Payments regulation
PSD2, strong customer authentication, 3D Secure, and what's coming from the EU: the rules that change how you charge.
12 articles
PSD3 oversight on banking APIs, ECB's Pontes platform, and AI agent payments
Finextra analyses API regulation under PSD3, while the ECB launches Pontes for wholesale settlement and Danske Bank runs purchases via AI agents.
Card routing modernization, UK open banking architecture, and ECB consumer expectations
Bank Pekao upgrades its card infrastructure with NCR Atleos, while UK open banking faces credit crunch debates and the ECB releases consumer data.
What changes with PSD3 and the PSR: spoofing fraud, refunds, and transparency
The EU's updated payment framework splits its rules between a directive and a directly applicable regulation. Here is what it means for merchants, gateways, and consumers dealing with social engineering fraud.
Personal data in payments: what GDPR says about emails, addresses, and purchase history
GDPR requires limiting data collection to the minimum necessary, but tax laws and fraud prevention mandate retaining transaction records. We analyse which legal bases justify each data point and for how long.
Bizum, card, or bank transfer: which method to offer and what each one costs
We analyse the operational differences, processing fees, fraud risks, and settlement times of cards, Bizum, and bank transfers for an online store in Spain.
Strong customer authentication (SCA) and 3D Secure: requirements, exemptions, and conversion
Strong customer authentication curbs card fraud but introduces checkout friction. We examine when the mandate applies, available exemptions, and how to protect conversion.
Flat rate or interchange++: which payment gateway pricing model is cheaper for your sales
Choosing between a flat rate and interchange++ determines whether you overpay on transaction fees. We examine how card types and European regulations shape the final cost.
Payment links: when they replace an online store and how to collect via direct channels
Payment links allow businesses to collect quotes and direct sales through WhatsApp or email without a web store, keeping full SCA and security standards.
Payment Retries: 3 Attempts and a 7-Day Grace Period
Learn what dunning is, why recurring payments fail, card network retry limits for Visa and Mastercard, and how Cifrago's 3-retry schedule will work.
Cancelling a subscription in one click: consumer regulations and the true cost of retention tricks
Obstructing digital subscription cancellations not only breaches European consumer law, but also drives bank chargebacks. We examine what the rules demand and how to design clean cancellations.
Preauthorisations and deferred captures: how to hold an amount and charge it later without surprises
Separating card authorisation from final settlement is a standard practice in e-commerce. We analyse how preauthorisation works, validity windows, and how to avoid operational friction.
Risk rules at checkout: velocity, geolocation, and smart authentication
Configuring effective risk filters in the payment gateway prevents fraud without hurting conversion. We examine how to assess velocity, IP, and issuing country to decide when to require 3D Secure.