April 2024 Summaries

Payments professionals seeking to keep pace with a rapidly evolving industry can draw on a broad range of books, publications, consulting resources, and compliance materials covering payment systems, technology, regulation, and operational strategy. Recommended books address global and U.S. payment infrastructures, card transaction mechanics, embedded finance, payment technology’s investment and societal implications, and the technology-driven shift toward real-time, personalized banking. Industry resources include PCI Security Standards Council materials for payment-card compliance, as well as publications and company libraries from PYMNTS, Glenbrook Partners, Basis Theory, Checkout.com, Recurly, and Butter Payments, which cover topics such as optimization, high-risk and recurring payments, subscription revenue, failed-payment prevention, regulations, and broader market developments.

Recurring payments, which automatically collect interval-based charges after customers provide payment details and consent, underpin the growing subscription economy by giving consumers access to products and services through smaller ongoing payments rather than large upfront costs. For merchants, this model can create predictable revenue, improve retention, support cross-selling and upselling, and lower some costs after customer acquisition. However, businesses also face voluntary and involuntary churn, failed payments caused by expired cards or insufficient funds, potential loss of processing access when payment service providers impose restrictions, and unexpected fees for refunds, cross-border transactions, or chargebacks. Automated payment systems connected to multiple providers can improve resilience and help merchants select favorable processing arrangements, while programmable payment vaults can reduce PCI-DSS compliance burdens by securely managing payment data and allowing merchants to route transactions and retry certain soft-declined payments.

Payment systems are broadly described as either closed, monolithic platforms that bundle functions such as payment processing, checkout, point-of-sale operations, and related services under one provider, or open systems that let merchants combine multiple gateways, acquirers, fraud tools, and other partners into a customized stack. Monolithic systems historically simplified implementation by reducing the number of vendor relationships, but they can limit customization, negotiation leverage, scalability, integrations, and resilience, while creating potential single points of failure and higher long-term maintenance costs. Examples include early e-commerce platforms, traditional point-of-sale software, legacy banking architectures, and some full-service payment providers. Open payment systems and payment orchestration approaches aim to provide greater flexibility and partner choice, though managing multiple integrations can add complexity. The passage presents programmable payment vaults, including Basis Theory, as a way to centralize payment data, support compliance, connect providers, and help merchants control payment flows while migrating from single-provider systems.

Merchants can reduce checkout abandonment and lost sales by balancing payment security and compliance with a streamlined user experience, as research links poor checkout design to significant cart abandonment. Recommended practices include limiting checkout forms to essential information, which can both improve conversion and minimize stored sensitive data; supporting widely used payment options such as credit and debit cards, ACH transfers, and digital wallets; and considering BNPL for higher-value purchases. Using multiple payment processors and intelligent routing can reduce service disruption risks and processing costs, while third-party tokenization platforms can help merchants manage PCI compliance, protect payment data, retain control of portable tokens, and connect with preferred fraud and security tools. The discussion also highlights adopting newer payment technologies, such as 3D Secure 2.0, which aims to improve authentication with less friction through mobile support, fewer redirects, and better data sharing with issuing banks.

Failed payments, especially in subscription and installment businesses, undermine expected revenue and can disrupt financial forecasts more seriously than isolated failed purchases. They may result from insufficient funds, expired, lost, or stolen cards, inaccurate customer information, or processor outages. Merchants can reduce failures through accurate merchant classification and subscription labeling, account-updater services, transparent customer billing terms and cancellation options, redundant payment gateways, and pre-dunning communications that remind customers of upcoming charges. When failures occur, businesses can recover revenue by distinguishing permanent hard declines from potentially temporary soft declines, retrying eligible transactions, using dunning messages to prompt customers to update payment details, and offering alternatives such as ACH or backup payment methods. Automated payment systems and token vaults can support these efforts by securely managing payment data, routing transactions among providers, reducing processing costs, and limiting PCI-DSS compliance exposure.

March updates expanded Apple Pay JS support to include merchant tokens and Buy Now, Pay Later, allowing merchants to decrypt Apple Pay payment tokens for DPAN or MPAN and cryptogram data used in custom processing. The company also broadened its Enterprise 3D Secure offering with integration guides covering authentication and its Web SDK, supporting fraud-reduction flows that validate cardholders during transactions. Fintech customers can now configure distinct CVC retention rules for multiple use cases within one tenant, helping organizations with varied product and card-issuing needs reduce integration effort. Additional platform improvements included React Native token updates, React element reference support, optional Luhn validation skipping for testing, faster token search and listing APIs, and a new expression for forwarding card expiration dates through proxies.

Merchant Risk Council’s March 25–28, 2024 conference in Las Vegas highlighted major trends and challenges in fraud and payments, including increasing adoption of network tokens as issuer support grows and card-network fees create stronger incentives for merchants. The discussion also distinguished network tokens, which are issued and used within card-network ecosystems, from universal or agnostic payment tokens that can work across channels, networks, and processors without revealing underlying payment data. Fraud remained a central concern, with a 2024 report indicating that merchants are encountering more types of attacks and that 94% of MRC members experienced first-party misuse fraud in the previous year, while AI-enabled fraud is expected to drive further evolution in fraud-management tools. Merchants also emphasized that selecting flexible, effective payment partners is essential for building tailored payment stacks, accelerating innovation, and supporting revenue growth, and Basis Theory noted its engagement with partners and merchants during the event.

Payments infrastructure comprises the banks, card networks, gateways, acquirers, security services, compliance providers, token vaults, and other technologies that enable exchanges between buyers and sellers. While banking originated in ancient recordkeeping and later relied on notes, letters of credit, and checks, electronic systems such as ACH accelerated settlement in the twentieth century and supported the growth of ecommerce. Online payments are described as progressing from direct merchant-bank connections, to gateway intermediaries, to full-service payment providers such as Stripe and Adyen, and more recently to merchants developing their own systems to reduce costs and gain flexibility. The discussion argues that merchants can improve margins by routing transactions through suitable processors, avoiding unnecessary cross-border and card-related fees, and managing payment data more directly. It presents token vaults as a way to retain control over reusable customer payment information while reducing the burden of storing sensitive data and maintaining PCI-DSS compliance, enabling payment routing, fraud controls, subscription billing, currency conversion, and customer-experience automation.