Cards with 3-D Secure
Visa and Mastercard with 3-D Secure authentication. Payment session, card data encryption and the result — in a single flow.
Visa & Mastercard · 3-D Secure · KZT / USD / EUR
One API and one dashboard: card payments, payment links, subscriptions, refunds and automatic payouts. From sign-up to your first payment in just a few steps.
Features
No need to stitch five services together: payments, links, payouts, KYC and reporting already work as one.
Visa and Mastercard with 3-D Secure authentication. Payment session, card data encryption and the result — in a single flow.
Amount, currency, order reference and expiry — and the link is ready. Send it over messenger, SMS or email. No website needed.
Each payment goes through the right acquiring channel based on your terminal's setup — no changes to your code.
One subscription link: the customer agrees to recurring charges and pays the first time, the card is saved, and the rest runs by itself. A failed charge is retried, and customers cancel or change their card on their own page.
Authorization followed by capture, void and refund. Disputes with the issuing bank are handled right in the dashboard.
Each period is calculated as turnover − fees = payout. Status: pending → processing → completed.
Search by order reference, e-mail, card or payment ID, filters by status and currency, CSV export — no manual spreadsheets.
Multiple stores, API keys with expiry dates, staff roles (administrator, accountant, developer), two-factor sign-in and a change log.
How a payment flows
Every step is secured and tracked. All that's left for you is the status and the payout.
We create a session and issue a public key for encryption.
Card data is encrypted with RSA + AES; your server never sees it.
The payment is sent to the right acquiring channel.
If required, the customer confirms the payment with their issuing bank.
The transaction is stored; its status is available via the API and statements.
The period is calculated, fees are deducted, and the money is sent to you.
For your customer
Your customer opens your link and lands on a clear payment page — on phone or desktop, no account required, no extra steps.
Try it yourself. This is a demo — no data is sent anywhere.
Protected by 3-D Secure and encryption
Dashboard
The merchant dashboard shows what matters: payments, links, payouts and access keys.
| Order | Card | Status | Amount |
|---|---|---|---|
| #4821 | Visa •••• 4242 | Paid | ₸48,900 |
| #4820 | MC •••• 1881 | Paid | ₸12,500 |
| #4819 | Visa •••• 0077 | 3-D Secure | $230 |
| #4818 | MC •••• 5510 | Refunded | ₸9,900 |
| #4817 | Visa •••• 2290 | Declined | ₸75,000 |
Launch
The sign-up wizard and the dashboard's launch checklist walk you through each step and tick off what's done automatically. Our team reviews the documents (KYC).
Create your companyFor developers
REST + JSON, authenticated with a key. A full OpenAPI spec, a Postman collection and a reference built into the dashboard — integrate in days, not months.
# Create a payment link curl -X POST https://api.st-payup.com/v1/payment-links \ -H "x-api-key: $ST_PAYUP_KEY" \ -H "Content-Type: application/json" \ -d '{ "amount": 150.75, "currency": "USD", "orderReference": "order_12345", "terminalId": "f6f0b462-570f-4027-b9b3-d345efca67c8", "description": "Premium T-Shirt" }'// Create a payment link const res = await fetch("https://api.st-payup.com/v1/payment-links", { method: "POST", headers: { "x-api-key": process.env.ST_PAYUP_KEY, "Content-Type": "application/json", }, body: JSON.stringify({ amount: 150.75, currency: "USD", orderReference: "order_12345", terminalId: "f6f0b462-570f-4027-b9b3-d345efca67c8", description: "Premium T-Shirt", }), }); const link = await res.json(); // 201 Created
{ "id": "2d120e98-…", "amount": 150.75, "currency": "USD", "status": "…" }Solutions
Card payments with 3-D Secure, refunds from the dashboard, and reconciliation by order reference.
Course payments via a link, saved cards, and automatic renewal charges for subscriptions.
Subscriptions with automatic charging and retries, a self-service page for customers, statements for tracking MRR.
Multiple stores and staff, separate keys and reporting for each location.
Pricing
Your final rate depends on turnover and vertical — we'll work it out on a single call.
For small stores and sole proprietors
For growing e-commerce and SaaS
For high volumes and platforms
Move the slider — we'll show the fee and the amount you'd receive.
This is an estimate: final rates depend on turnover and vertical.
* Rates shown are indicative and not a binding offer.
Reliability
Card data never passes through your server and is never stored in plain text.
FAQ
Registration takes a few minutes: one request creates your company, account and first store. Then — email confirmation, a KYC review by our team, and API keys are issued. After that you can create payment links right away.
Visa and Mastercard bank cards with 3-D Secure. Currencies: KZT, USD, EUR. The exact list is confirmed when you connect.
No. Payment links let you accept payments through messengers, social media and email — no website or development needed.
The platform calculates each period as "turnover − fees = payout." The payout status moves through pending → processing → completed, and the history is visible in the dashboard.
Yes. Authorization followed by capture, void and refund are supported. Subscriptions are charged automatically: a failed charge is retried, and customers can cancel or replace their card on their own page.
Card data is encrypted (RSA + AES) with the payment session's public key and decrypted only inside a protected key service. Repeat charges use tokens.
You create a link marked as a subscription with a period: daily, weekly or monthly. The customer agrees to recurring charges and pays the first time, the card is saved, and later charges run by themselves. Customers get e-mails and a page where they can cancel or change their card.
Yes. The dashboard has a test mode: a separate copy of your store with its own keys and test cards. No money is charged.
Set a webhook address: we send a signed notification (HMAC-SHA256) and retry if your server does not answer. The delivery history is visible in the dashboard.
Yes. Roles: administrator, accountant (view only), developer (keys and links, no finance). Sign-in can be protected with a second factor, and every change goes into the log.
Sign up and work through the checklist yourself — or leave your contact details and a manager will help you get connected.
Create your company →