A payment gateway is a merchant service provided by an e-commerce application service provider that authorizes credit card or direct payments processing for e-businesses, online retailers, bricks and clicks, or traditional brick and mortar.[1] The payment gateway may be provided by a bank to its customers, but can be provided by a specialised financial service provider as a separate service, such as a payment service provider.

A payment gateway facilitates a payment transaction by the transfer of information between a payment portal (such as a website, mobile phone or interactive voice response service) and the front end processor or acquiring bank.

Payment gateways are a service that helps merchants initiate ecommerce, in-app, and point of sale payments for a broad variety of payment methods. The gateway is not directly involved in the money flow; typically it is a web server to which a merchant's website or POS system is connected. A payment gateway often connects several acquiring banks and payment methods under one system.

Typical transaction processes

When a customer orders a product from a payment gateway-enabled merchant, the payment gateway performs a variety of tasks to process the transaction.[2]

  1. A customer places an order on a website by pressing the 'Submit Order' or equivalent button, or perhaps enters their card details using an automatic phone answering service.
  2. If the order is via a website, the customer's web browser encrypts the information to be sent between the browser and the merchant's webserver. In between other methods, this may be done via SSL (Secure Socket Layer) encryption. The payment gateway may allow transaction data to be sent directly from the customer's browser to the gateway, bypassing the merchant's systems. This reduces the merchant's Payment Card Industry Data Security Standard (PCI DSS) compliance obligations without redirecting the customer away from the website.
  3. The merchant then forwards the transaction details to their payment gateway. This is another (SSL) encrypted connection to the payment server hosted by the payment gateway.
  4. The payment gateway converts the message from XML to ISO 8583 or a variant message format (format understood by EFT Switches) and then forwards the transaction information to the payment processor used by the merchant's acquiring bank.
  5. The payment processor forwards the transaction information to the card association (I.e. Visa/Mastercard/American Express). If an American Express or Discover Card was used, then the card association also acts as the issuing bank and directly provides a response of approved or declined to the payment gateway. Otherwise [e.g. Mastercard or Visa card was used], the card association routes the transaction to the correct card issuing bank.
  6. The credit card issuing bank receives the authorization request, verifies the credit or debit available and then sends a response back to the processor (via the same process as the request for authorization) with a response code (I.e. approved or denied). In addition to communicating the fate of the authorization request, the response code is also used to define the reason why the transaction failed (I.e.: insufficient funds, or bank link not available). Meanwhile, the credit card issuer holds an authorization associated with that merchant and consumer for the approved amount. This can impact the consumer's ability to spend further (because it reduces the line of credit available or it puts a hold on a portion of the funds in a debit account).
  7. The processor forwards the authorization response to the payment gateway.
  8. The payment gateway receives the response, and forwards it onto the website, or whatever interface was used to process the payment, where it is interpreted as a relevant response, then relayed back to the merchant and cardholder. This is known as the Authorization or "Auth."
  9. The entire process typically takes 2–3 seconds.[3]
  10. The merchant then fulfills the order and the above process can be repeated but this time to "Clear" the authorization by consummating the transaction. Typically, "Clearing" is initiated only after the merchant has fulfilled the transaction (I.e. shipped the order). This results in the issuing bank "Clearing" the "Auth" (I.e. moves auth-hold to a debit) and prepares them to settle with the merchant acquiring bank.
  11. The merchant submits all their approved authorizations, in a "batch" (end of the day), to their acquiring bank for settlement via its processor. This typically reduces or "Clears" the corresponding "Auth" if it has not been explicitly "Cleared."
  12. The acquiring bank makes the batch settlement request of the credit card issuer.
  13. The credit card issuer makes a settlement payment to the acquiring bank (the next day in most cases).
  14. The acquiring bank subsequently deposits the total of the approved funds into the merchant's nominated account (the same day or next day). This could be an account with the acquiring bank if the merchant does their banking with the same bank, or an account with another bank.
  15. The entire process from authorization to settlement to funding typically takes 3 days.

Many payment gateways also provide tools to automatically screen orders for fraud and calculate tax in real time prior to the authorization request being sent to the processor. Tools to detect fraud include geolocation, velocity pattern analysis, OFAC list lookups, 'deny-list' lookups, delivery address verification, computer finger printing technology, identity morphing detection, and basic AVS checks.

In easy words, a transaction processes with the following steps;

1: When the customer enters their card details in the payment gateway, the payment gateway transfers it securely to the merchant’s account.

2: Then a request is sent through your merchant account to the payment processor.

3: The payment processor then sends the request to the issuing (customer’s) bank.

4: If the transaction is approved the customer’s account is debited and the funds are transferred to the merchant’s (acquiring) bank.

This is how a transaction works in simple words.

White label payment gateway

Some payment gateways offer white label services, which allow payment service providers, e-commerce platforms, ISOs, resellers, or acquiring banks to fully brand the payment gateway’s technology as their own.[4] This means PSPs or other third parties can own the end-to-end user experience without bringing payments operations—and additional risk management and compliance responsibility—in house, although the party offering the white labelled solution to its customers might still be responsible for some regulatory requirements such as Know your customer.[5]

See also

References

  1. ↑ "eCommerce: Payment Gateways". digitalbusiness.gov.au. Archived from the original on 18 November 2012. Retrieved 20 November 2012.
  2. ↑ Gulati, Ved Prakash. "The Empowered Internet Payment Gateway" (PDF). Computer Society of India. Retrieved 22 May 2013.
  3. ↑ "eCommerce: Choosing your payment methods". digitalbusiness.gov.au. Archived from the original on 23 January 2013. Retrieved 19 November 2012.
  4. ↑ Investopedia Staff (2008-05-21). "White Label Product". Investopedia. Retrieved 2017-07-20.
  5. ↑ "Acquirer Services - White Label Payment Processing - MasterCard Payment Gateway Services". www.mastercard.com. Retrieved 2017-07-20.
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.