Cards Payment Experience

For cards, the recurring payments do not require the customer’s involvement for completing the transactions. The transactions are processed without the CVV/CVV2 and Two Factor Authentication (2FA). Recurring Payments provides a hassle-free payment experience to the customer if they had already provided the consent for allowing the merchant to charge their card regularly.

Since Recurring Payments do not have 2FA, the following are the strict guidelines from RBI apply:

• The first transaction must go through the standard 2FA flow (OTP/Mastercard secure password/verified by Visa password) where the customer’s consent for further recurring payments needs to be taken either by merchant (seamless flow) or PayU (non-seamless flow). For more information on PayU workflow to do the first transaction, refer to Registration Transaction Workflow.
• After the consent is taken, the merchant can use either S2S APIs or the File upload utility of PayU to charge the customer regularly without the 2FA. For more information on PayU Recurring Payment workflow, refer to Recurring Transaction Workflow.

How do Recurring Payments work?

1. Customer lands on the merchant website and proceeds for payment.
2. Merchant presents an option to sign up for on the recurring platform where the customer must provide his/her consent.
3. Billing details like amount, frequency, start date and end date of the subscription are presented to the customer and passed to the PayU during payment request.
4. After the customer validates the subscription plan and enters the preferred card details, the customer is redirected to the 3D Security (3DS) flow where the authentication and authorization process place.
5. There are multiple ways to process the First transaction/Consent transaction to obtain the customer’s consent:
   a. A consent transaction can be an actual subscription for the First billing cycle so that the customer will be charged for the whole amount through 3DS (2FA) flow and subsequent transactions will be processed through the recurring payment.
   b. A consent transaction can be a small transaction (like 5 INR) where the customer’s card is taken on file along with consent and the amount is refunded back by the merchant on calling the Refund API. This method is popular where the merchant offers their free services for the first billing cycle and then charges subsequent bills through the recurring payments.
6. After the customer’s consent is taken, the card details are saved in the PayU’s secure vault and a card token is generated.
7. The card token is returned to the merchant in the payment response along with PayU’s ID. Merchant is supposed to map this PayU ID it against customer’s profile so that henceforth it can be used charging customer through the recurring platform.

📘

Note:

The card token is not an actual card number, and hence merchant is not having any PCI DSS hassles in storing the same at his end.

At present, Standing Instruction is supported for the following payment instruments:

• Credit Card (scheme-wise, all issuers are supported)
  • Visa
  • Master Card
  • American Express
• Debit Card (only Visa and Master Card schemes and selected issuers)

Cards registration transaction workflow

Merchant presents an option to sign up for a recurring platform where the customer needs to provide his/her consent. Billing details like amount, frequency, start date, and end date of the subscription need to be presented to the customer and passed to PayU during payment request.

The workflow for first-time payment involves:

1. When the customer attempts a transaction for the first time, the customer must complete the transaction by entering the card details (CVV, Expiry and Card number) and the OTP on the Issuing Bank’s webpage. To handle a standing instruction for a customer, the merchant would need to use a post parameter (SI).

2. During this first transaction, the merchant must post this parameter depending on the decision of the customer at their website.
3. If the value of the SI parameter is 1 from the merchant, the following message is displayed to the customer.
   ‘I agree to save card details for Standing Instructions’.

📘

Note:

By default, the I agree to save card details for Standing Instructions check box is selected. The customer cannot uncheck the check box and has to transact with the SI option only.

Cards recurring transaction workflow

Prerequisites

For every successful registration, before the recurring charge, a pre-debit notification has to be triggered 48 hours before the charge. This RBI mandate has to be strictly adhered to by merchants. If a pre-debit notification is not triggered, a recurring charge won’t happen.

Workflow

The workflow for the Recurring payment involves:

1. Merchants must call the Pre-Debit Notification API before the recurring payment transaction is done. For more information, refer to Pre-Debit Notification API.

2. Merchants can call recurring payment API (si_transaction) for subsequent debits. For more information, refer to Recurring Payment Transaction API.

   OR

   Merchants can use bulk upload recurring feature by uploading the records in an excel file. For more information, refer to Recurring Payments Using PayUBiz Dashboard

Merchants can use Zion Platform where Payu will trigger recurring basis the billing details sent at the time of subscription setup. For more information, refer to Using Zion Subscription Automation

You can use Recurring Payment API or bulk upload on PayUBiz Dashboard. For more information, refer to the following sections:

• Recurring Payment Transaction API for Recurring Payment Transaction API.
• Bulk Upload of Payment Links for Recurring Payments+ Pre-Debit Notification API for bulk upload of payment links using PayUBiz Dashboard.

Transaction limits

The transaction limit for recurring payments using debit card or credit card are as per the card holders limit or Rs.10,00,000 (if the card limit is more than Rs.10,00,000).