Articles on Online payments
How a card payment works on the web: checkout, authorisation, settlement, wallets, and payment methods.
28 articles
B2B invoicing deadlines, offline card payments and stablecoin orchestration
We review the divergence between VeriFactu and B2B e-invoicing, Mastercard's offline payment mandate, and new corporate stablecoin rails.
Cross-border settlement friction, reusable verification, and e-commerce employment standards
European payments navigate cross-border operational hurdles and advances in reusable identity verification, while e-commerce confronts compliance with labour frameworks.
AI risk models, mobile card personalization, and digital money according to the ECB
Plaid unveils AI tools to mitigate fraud and payment risk, Wells Fargo introduces debit card customization in its app, and the European Central Bank addresses tokenization.
Credit access via open banking, invoice fraud protection, and the ECB's policy diagnosis
We examine open banking's role in tackling credit exclusion, Basware's purchase of Trustpair, and monetary challenges outlined by the European Central Bank.
Payment gateway API keys: least privilege, rotation, and leak response
Managing payment credentials requires separating environments, restricting privileges, and maintaining an immediate revocation and audit protocol for accidental leaks.
Embedded finance in operational software and new supervisory decisions
BMO and Mastercard embed virtual commercial cards into business platforms, the ECB issues governance decisions, and a case highlights unmonitored contract risks.
Unit costs in micropayments, stablecoin settlement trials, and cross-border instant rails
Merchant friction over transaction fees in low-value sales highlights margin pressure, while banking institutions deploy Swift instant schemes and stablecoin settlement pilots.
Cross-border alias payments via Bizum, transfers to digital wallets, and VAT balance scrutiny
Swift links systems like Bizum for international alias-based transfers, BNY introduces payments to digital wallets, and the Supreme Court confirms historic VAT audits.
Tether processor bank accounts seized, AI analytics in fintech, and EU AML scrutiny
US action against a Tether-linked payment provider and an infringement procedure against Spain highlight compliance and settlement risks.
Passkey-driven agentic purchases, cloud instant payments, and stablecoin fee pressure
Autonomous commerce takes its first steps in Europe as instant rail rollouts and digital assets reshape traditional banking revenues.
Stablecoin settlement arrives on card networks as P2P options expand
Mastercard and SoFi test blockchain settlement for card programmes, while Moov enables direct-to-card P2P payments. We also cover rising bank deposit yields and fiscal debates impacting businesses.
PSD3 oversight on banking APIs, ECB's Pontes platform, and AI agent payments
Finextra analyses API regulation under PSD3, while the ECB launches Pontes for wholesale settlement and Danske Bank runs purchases via AI agents.
Card routing modernization, UK open banking architecture, and ECB consumer expectations
Bank Pekao upgrades its card infrastructure with NCR Atleos, while UK open banking faces credit crunch debates and the ECB releases consumer data.
Apple Pay and Google Pay without the marketing: network tokens and fraud reduction
Far from simple digital wallets, Apple Pay and Google Pay rely on network tokens and dynamic cryptograms. We examine their technical mechanics and fraud impact.
What changes with PSD3 and the PSR: spoofing fraud, refunds, and transparency
The EU's updated payment framework splits its rules between a directive and a directly applicable regulation. Here is what it means for merchants, gateways, and consumers dealing with social engineering fraud.
Personal data in payments: what GDPR says about emails, addresses, and purchase history
GDPR requires limiting data collection to the minimum necessary, but tax laws and fraud prevention mandate retaining transaction records. We analyse which legal bases justify each data point and for how long.
Bizum, card, or bank transfer: which method to offer and what each one costs
We analyse the operational differences, processing fees, fraud risks, and settlement times of cards, Bizum, and bank transfers for an online store in Spain.
Strong customer authentication (SCA) and 3D Secure: requirements, exemptions, and conversion
Strong customer authentication curbs card fraud but introduces checkout friction. We examine when the mandate applies, available exemptions, and how to protect conversion.
Flat rate or interchange++: which payment gateway pricing model is cheaper for your sales
Choosing between a flat rate and interchange++ determines whether you overpay on transaction fees. We examine how card types and European regulations shape the final cost.
Payment links: when they replace an online store and how to collect via direct channels
Payment links allow businesses to collect quotes and direct sales through WhatsApp or email without a web store, keeping full SCA and security standards.
Simplified vs full invoice in online sales: legal thresholds and required data
Knowing when an online store can issue a simplified invoice and when it must collect full fiscal details is essential for conversion and tax compliance. We examine Spanish regulations and their technical impact on the checkout flow.
Payment Retries: 3 Attempts and a 7-Day Grace Period
Learn what dunning is, why recurring payments fail, card network retry limits for Visa and Mastercard, and how Cifrago's 3-retry schedule will work.
Idempotency in payments: how to avoid double charges from retries and duplicate webhooks
Network hiccups or duplicate webhooks can trigger duplicate charges if systems lack idempotency protections. We review the mechanics and database patterns to prevent repeated billing.
Preauthorisations and deferred captures: how to hold an amount and charge it later without surprises
Separating card authorisation from final settlement is a standard practice in e-commerce. We analyse how preauthorisation works, validity windows, and how to avoid operational friction.
Risk rules at checkout: velocity, geolocation, and smart authentication
Configuring effective risk filters in the payment gateway prevents fraud without hurting conversion. We examine how to assess velocity, IP, and issuing country to decide when to require 3D Secure.
Payment security: what you must never store, and why webhooks are signed
Most online payment incidents don't come from a sophisticated attack, but from two design decisions: storing card data you never needed, and trusting whatever the customer's browser says.
In-app payments: what the store takes, and when you can charge outside it
App Store and Google Play commissions don't apply to everything you sell from an app. The dividing line is what kind of product you deliver, and knowing where your case falls decides whether you pay 15%, 30%, or your own gateway's fee.
What actually happens inside an online card payment
Between the customer pressing "pay" and the money reaching your account, three separate things happen: authorisation, capture, and settlement. Knowing where each one occurs explains why a payment can show as "approved" and still not be charged.