Payment rules

It's possible to use Vipps MobilePay for several types of payments. The regulatory requirements are different for different types of purchases. One major difference is if the cardholder is physically present and "can look the seller in the eye" while making the payment.

Vipps MobilePay needs to do more thorough "Know Your Customer" (KYC) and compliance checks for some examples above. This must be done per sales unit. Vipps MobilePay is also required to have the correct MCC (Merchant Category Code) for each sales unit.

Because of this, merchants must use separate sales units for separate types of purchases. This also has some benefits:

• Each sales unit has its own name presented to the user in the app
• Each sales unit has separate transaction logs
• Each sales unit can have its own settlement account. Sharing a single account across multiple sales units is available on request.

Capture regulations

For Norway, According to Norwegian regulations you must not capture a payment until the product or service is provided to the customer. See: Forbrukerkjøpsloven §38. See the Consumer Authority's Guidelines for the standard sales conditions for consumer purchases of goods over the internet.

Payment time limits

After you receive a notification that payment was reserved, or you retrieve payment, and it has a state reserved, you must capture payment in order to end the flow and receive the money with a nightly transfer.

Payment time limits

If payments are not captured within the below time limits, they will be automatically cancelled. Attempting to handle an older payment will result in a HTTP 400 Bad Request.

For Norway, the time limit for capturing payments is 180 days. Be aware: Cards can have different time limits.

For Denmark and Finland, the time limit for capturing payments is 14 days. If you require more time, use Vipps MobilePay Checkout to initiate the payments.

Special rules apply for payments made with Vipps MobilePay Checkout: All payments started in Checkout can be captured up to 180 days after reservation, regardless of country or payment app. Be aware: Cards can have different time limits.

Card payments

The ePayment API and the Checkout API support freestanding card payments: Users can enter their card details and pay with the card without using the app. This means that payments are possible also for users in countries where Vipps MobilePay is not yet available.

Both Visa and Mastercard are supported. This includes any cards that are co-branded with VISA and Mastercard.

Visa Electron is supported, if the card is enabled for online purchases.

info

To reduce risk, we do a 3D Secure step-up for all cards used for freestanding payments. This is because, when users are making freestanding payments, the delegated SCA that is used in the app isn't present. If the issuer does not handle 3D Secure correctly, the payment will fail.

Cards issued in the following countries are accepted:

• EEA/EØS (European Economic Area)
• Australia
• Canada
• Israel
• Japan
• New Zealand
• Republic of Korea
• Switzerland
• UK
• USA

tip

Just to avoid confusion: Payments with the app are also done using the users' cards that they have been added there. The user gets all the benefits of the card, and since the app has delegated SCA, the user gets a faster and simpler user experience. See also: Direct integration and PSP integration.

Time limits for card payments

We don't control the behavior of the customer's card or account. The details may change, but the information below is the best we can offer. We will try to clarify it more in the near future.

• VISA reservations are valid for 7 days (but only 5 for Visa Electron). The banks will release the reservation after 4-7 days, but if the capture is done within the 7 days, VISA guarantees that the capture will succeed. Our PSP is Adyen, and they have some documentation for VISA reservations.

• MasterCard reservations are valid for 30 days. The banks may release the reservation before this, but if the capture is done within the 30 days, MasterCard guarantees that the capture will succeed. Our PSP is Adyen, and they have some documentation for Mastercard reservations.

We can't and don't automatically change the status of a reservation.

If a capture attempt is made more than 7 days (VISA) or 30 days (MasterCard) after the payment has been initiated, and the reservation has been released by the bank in the meantime, we will make a new payment request to the bank. If the account has sufficient funds, the payment will be successful.

If the user's account has insufficient funds at this time, the payment will either succeed and put the customer's card/account in the negative (as an overdraft), or fail because the customer's card/account cannot be put into the negative - for example youth accounts. We can't know in advance what will happen.

It is also possible that the card expires, is blocked, etc. somewhere between the time of reservation and the time of capture. We can't know in advance what will happen.

In many cases, the bank will have a register of expired reservations, and they will force the capture through if the account allows this. This will put the account in the negative.

Customers may, understandably, be dissatisfied if the capture puts their account in the negative, so please avoid this.

Capture can be made up to 180 days after reservation. Attempting to capture an older payment will result in a HTTP 400 Bad Request.

Customer protection

The customer must actively accept the terms and conditions for the purchase. This is not possible if you just send a deeplink.

For Norway, see the Consumer Authority's Guidelines for the standard sales conditions for consumer purchases of goods over the internet.

We comply with local applicable laws as well as guidance from the Norwegian Data Protection Authority, Datatilsynet, and other relevant local authorities.