2D payment gateway: accept card payments without OTP

What is a 2D payment gateway?

A 2D payment gateway authorises a card payment using only the details printed on the card — the number, the expiry date and the CVV. The "two dimensions" are those two layers of data: the card itself and its verification code. There is no third layer of authentication, so the customer is never redirected to their bank, never waits for an SMS, and never types a one-time password. They enter their card once, and the transaction goes straight to the acquiring bank for an approve-or-decline decision.

How a 2D transaction works

1. The customer enters their card number, expiry and CVV at your checkout.
2. The gateway encrypts the details and forwards the request to the acquiring bank.
3. The acquirer routes it through the card network to the customer's issuing bank.
4. The issuer checks funds and its own fraud scoring, then approves or declines — with no challenge sent to the cardholder.
5. The result comes back in two to four seconds. With Global 2D Pay, settlement reaches your bank account within 24 hours.

2D vs 3D Secure

3D Secure exists for a reason: passing the authentication shifts much of the fraud liability away from you. But it is also where checkouts die — codes that never arrive, sessions that time out, foreign cards that fail the challenge. Note too that some markets require extra authentication for domestic online card payments, which is why many merchants run 2D primarily on their cross-border sales.

For a fuller comparison — liability, approval rates and the rules by market — read 2D vs 3D Secure: what's the difference?

Who actually benefits

Cross-border sellers gain the most: SMS delivery across borders is unreliable, and foreign-issued cards fail 3DS challenges more than any other group. Subscription businesses avoid re-challenging a customer on every renewal. NGOs keep donations that would otherwise be abandoned at a verification screen. And high-risk categories that mainstream processors decline can often be approved by a 2D provider that underwrites the business rather than the label.

Create Account

The trade-off nobody should hide

Because the cardholder is not authenticated by their bank, fraud liability in a 2D transaction generally sits with you, the merchant. A fraudulent charge that would have been the issuer's problem under 3DS becomes your chargeback. Any provider who sells you 2D processing without saying this plainly is not being straight with you. The honest pitch is narrower: 2D wins you completed sales that 3DS loses, and in exchange you take on risk that has to be managed — which is what the next section is for.

Best practices for running a 2D gateway safely

• Use a clear billing descriptor. Most "fraud" chargebacks are really confusion — customers not recognising the charge. Your trading name on the statement prevents them.
• Keep proof of delivery or usage. Tracking numbers, download logs and login records win disputes; missing evidence loses them by default.
• Screen risky orders. Match CVV and address checks, watch order velocity from a single card, and flag mismatched countries between card, IP and shipping.
• Refund fast when something is wrong. A refund costs you the sale; a chargeback costs the sale, a fee and a mark on your ratio.
• Watch your chargeback ratio monthly. Card networks penalise merchants past roughly 1% of transactions — treat that as your hard ceiling, not a target.

How to choose a 2D payment gateway provider

The names differ by market, but the questions that matter are the same everywhere. Before you sign with anyone, get straight answers on these:

• Will they tell you before onboarding whether your category is approvable — including a plain "no"?
• Settlement speed and any rolling reserve, in writing, before the first payout.
• Which currencies you can charge in, and which currency you settle in.
• Integration routes: hosted payment page, invoice links, API, and plugins for your platform.
• Whether chargeback alerts and screening tools are included or an upsell.
• Whether support is a human who answers the same day, or a ticket queue.

Start accepting 2D payments

With Global 2D Pay the path is short: create your account, pass a short document check on your business, connect through a hosted payment page, our API or the WooCommerce plugin, and take your first payment — with settlement to your bank inside 24 hours. Applications get a same-day answer, in any of our four services, for merchants in 180+ countries.

Create Account

Frequently asked questions

Is a 2D payment gateway legal?

Yes, where the card networks and local rules permit unauthenticated transactions. Some markets mandate additional authentication for domestic online card payments, so merchants there typically use 2D processing for cross-border sales. Check what applies in your market — we will tell you honestly during onboarding.

Is it safe for my customers?

Cardholders are protected by their bank's zero-liability policies either way — a fraudulent charge is reversed for them. The risk in 2D processing is carried by the merchant, not the customer, which is exactly why the best practices above matter.

Will every card be approved?

No. Some issuing banks decline transactions that have not been authenticated, and approval rates vary by market. A serious provider gives you a realistic picture for your customer base before you commit rather than after.

Ready to set one up? Read how to create a 2D payment gateway account — documents, verification and integration, step by step.

← Back to Global 2D Pay