Steps & Work Content
Online Payment
Merchant-hosted
Merchant-Hosted offers an easy and convenient payment user experience without being redirected from the merchant’s page while ensuring a high level of security with prior card enrollment and cardholder identity verification before first use. After the card is enrolled, subsequent payment experiences will be a “one-click” experience, without the need to enter any card information or SMS code.
Applicability
Acquirer: UPay E-Commerce License
Merchant: PCI-DSS certification
Scenarios
Merchants with an account architecture
Card-on-file scenarios of UPI token service
Payment Flow
Payment Flow
Enrollment Process:
- The cardholder adds a UPay card in their account on the merchant’s site. The acquirer sends an SMS-sending request to UPay.
- UPay forwards the request to the issuer.
- The issuer checks whether the card number and phone number match with the information stored in its system.
- The issuer forwards the result to UPay. If the information matches, UPay sends an SMS code to the cardholder’s phone number.
- The cardholder enters the SMS code.
- The acquirer sends the enrollment request to UPay.
- UPay verifies the SMS code.
- If the SMS code is correct, UPay forwards the enrollment request to the issuer.
- The issuer verifies the card information and forwards the result to UPay, then UPay forwards the transaction result to the acquirer.
- The acquirer sends a purchase or preauthorization request to UPay.
- UPay forwards the request to the issuer.
- The issuer processes the request.
- The issuer sends the transaction result to UPay.
- UPay forwards the transaction result to the acquirer.
Use Case :
- Wallet merchant
- Large merchants
Large merchants with an account architecture that can manage card information or token information properly.
Features
- Frictionless model, one-click payment
- Good user experience and high success rate
- Risk controlled via initial authentication
Apply for membership and e-commerce acquiring license
Contact the local UPay office, and fill in and submit the application form.
Download SDK and documents
Download the SDK, implementation guide and interface specifications from the Institution Service Platform.
Submit the application form
Submit the e-commerce acquiring application form with signature. TR Registration Form is additionally required for token service.
Modify the system
Follow the implementation guide and interface specifications to modify the system.
Test
Apply for testing on the UTSS platform, and conduct testing in UTSS.Apply for testing on the UTSS platform, and conduct testing in UTSS.
Go live
Go live after passing the testing.
The ExpressPay product provides a fast and easy UPay online payment solution to acquirers and merchants.
API Introduction
Key Features
- A frictionless model
- Enrollment and payment steps are finished on the merchant/acquirer page without redirection;
- One-click payment for enrolled card;
- Debit/Credit card do not need PIN to finish payment;
- No SMS verification during the payment;
- First time authentication is required to help merchant reduce risk;
- UPOP server sends SMS to cardholder mobile devices to identify the cardholder identification;
- UPOP server verifies SMS code and forward the mobile number to issuer.
Who Use it?
Merchant, Acquirer and Developer
Where to Use it?
This API is available globally.
Flow Chart
- Cardholder chooses product on a merchant website.
- The merchant initiates a request message to the acquirer system;
- The acquirer transfers the transaction to UPay Omnichannel Platform (UPOP);
- Cardholder checks individual’s identity on UPOP;
- UPOP transfers the transaction to UPay core processing system;
- UPay core processing system converts FX rate and transfers the transaction to the issuer;
- The issuer authorizes transaction and the response message goes back to the merchant website over the same route.