Card Payments

All major debit, credit (retail and corporate), and prepaid card brands like Visa, Mastercard, Amex, Rupay, Diner and Discover are supported. You have the flexibility to accept payments from specific card types only. For example, accept payments from debit cards only, or credit cards only. Write to [email protected] to get the payment method customised.

Customers have the option to save their card details during payments. It allows them to make faster payments from then on without having to enter the card details for every transaction. Cards are only saved once the transaction is successful. Click here to know more.


Cashfree payment gateway now supports preauthorization on credit/debit card transactions. Card brands supported are Mastercard and Visa card type only. Pre Auth flow allows you to authorize any amount of funds from your customer’s card and capture these funds (or any part of it) at a later time. This is different from typical credit/debit card transactions where the capture of funds happens immediately after the transaction is authorized.

When your customers place an order, you can temporarily block funds on their card using preauthorization. If the order is modified or is cancelled within a specific time frame, you can mark the transaction void and the blocked amount is immediately available in the customer account. There will not be any payment gateway transaction cost (TDR) on cancelled orders. You can capture verified transactions and mark cancelled transactions as void using the Bulk Capture option.

3D Secure 2.0 Authentication Protocol (3DS2)

3D Secure 2 is an authentication protocol that allows you to provide protection across multiple platforms with easy integration into their systems. 3DS2 is the updated version of 3DS1. The important upgrade with respect to 3DS2 is the introduction of frictionless authentication and improved user experience.

With this, Cashfree now accepts international card payments using credit, debit, or prepaid cards issued by banks outside India. International card payments are enabled for all existing merchants

How 3DS2 works:

3DS2 allows banks to verify the transaction for its authenticity. This situation arises if the customer bank determines that the transaction is not performed from a trusted device and needs extra information. You need to pass additional payment information such as customer IP, customer device details, merchant details, etc. Based on these data points networks compute a risk score.

If a transaction is determined as low-risk it goes through a smooth frictionless flow and no further action is required. However, if a transaction is determined as high-risk, the transaction goes through a challenge flow.

A transaction either goes through a frictionless flow or a challenge flow, the process is explained below:

Frictionless flow allows issuers to approve a transaction without the need to interact with the cardholder.
A challenge flow is activated if the bank determines that the transaction is not coming from a trusted device and needs additional information. The customer needs to perform additional authentication steps.

What does 3DS2 offer?

  • Enhanced authentication service.
  • The 3DS2 protocol allows you to pass additional customer & device data to issuing banks.
  • Enhanced customer experience with easier payment cycle through frictionless flow.
  • 3DS2 protects your customers from fraudulent transactions across most platforms by providing an additional layer of security. This reduces payment authentication failures.
  • 3DS2 provides you greater insight into transactional patterns.


Cashfree Payments is now live with 3DS framework to enable Indian merchants accept international payments while protecting their business from fraud and chargebacks.


Card Tokenization is the process of replacing sensitive card information like PAN (16-digit Primary Account Number), and PAN expiry with a cryptographically generated random string. This is referred to as the card token. Once a card is tokenized, the generated card token can be used for processing payments as a substitute for sensitive card details like PAN and PAN expiry. This eliminates the issue of loss of sensitive card information while making card payments.

Related page links -