Online payment

Information about online payment

Our webshop offers its customers a secure card payment solution provided by CIB Bank. Security is based on the separation of data. The webshop receives only the information related to the order from the customer, while CIB Bank receives exclusively the card data needed for the payment transaction, on a payment page secured with 256-bit TLS encryption. The webshop is never informed of the data content of the payment page — only CIB Bank has access to it. Following payment, the webshop's page informs you of the transaction result. To pay by card, your internet browser must support TLS encryption.

The value of the purchased goods/services, i.e. the amount paid, is immediately held (blocked) on your card account. Please read our detailed information below!

Welcome to our webshop, which operates with CIB Bank's secure online payment solution!

Below we briefly explain how you can complete your purchase securely.

What should you pay attention to when shopping?
Read our webshop's description, the terms of purchase, and the delivery and payment conditions!
Study the webshop's security terms, as these guarantee the security of your data!
Keep a record of your purchase-related data!
Keep a record of your payment-related transaction data (transaction ID, authorisation number)!
Make sure that no unauthorised person can ever access your confidential card data.
Use a browser that supports the option required for TLS encryption!

About security
TLS, Transport Layer Security, is an accepted encryption method. Our bank has a 256-bit encryption key that protects the communication channel. The company VeriSign enables CIB Bank to use the 256-bit key, with which we ensure TLS-based encryption. Currently, this encryption method is used in 90% of the world's electronic commerce. Using TLS, the browser used by the customer encrypts the cardholder's data before sending it, so that it reaches CIB Bank in encoded form and cannot be interpreted by unauthorised persons.

Accepted cards
CIB Bank's online payment system allows payment with Mastercard/Maestro cards, VISA and VISA Electron cards belonging to the VISA product family (Electron only if permitted by the issuing bank), as well as with web cards suitable for internet use.

Steps of payment
On the webshop's page, you select the goods for which you wish to pay by card.
You are then transferred to CIB Bank's page, which guarantees secure payment, where you need to fill in your card details to start the payment.
After entering your card details, you can start the transaction by clicking the "Pay" button.
After payment, you return to the webshop's page, where you receive confirmation of the transaction result.

In the case of card payment, following a successful transaction — meaning acceptance after verification of the card's validity and available funds — CIB Bank initiates the debit of the cardholder's account for the value of the goods or services.
If you are not redirected from the payment page back to the webshop's page, the transaction is considered unsuccessful. If, on the bank's payment page, you click the browser's "Back" or "Refresh" button, or close the browser window before being redirected back to the webshop, the payment is considered unsuccessful.
If you would like more information about the result of a transaction, or in case of failure, its reason and details, please contact your account-holding bank.

Questions and answers about online card payment

CARD ACCEPTANCE

What types of cards can be used for payment?
Embossed VISA and Mastercard cards, as well as certain VISA Electron cards. The possibility of using VISA Electron cards online depends on the card-issuing bank. A VISA Electron-type card issued by CIB can be used for online purchases.

Which banks' cards are suitable for online payment?
Any VISA and Mastercard/Maestro card that has been authorised for online payment by the issuing bank, as well as web cards specifically intended for online use.

Can loyalty cards be used for payment?
Points-based loyalty cards issued by merchants/service providers cannot be used for online payment.

Can co-branded cards be used for payment?
Payment is possible with any co-branded card that is a MasterCard- or VISA-based card suitable for online payment.

PAYMENT PROCESS

How does the bank's background process for online payment work?
After selecting card payment on the merchant's/service provider's website, the customer initiates payment, as a result of which they are transferred to the Bank's payment page, which has a secure communication channel. To make the payment, it is necessary to enter the card number, expiry date, and the 3-digit verification code found on the signature strip on the back of the card. You initiate the transaction, from which point the card undergoes real-time authorisation, during which the authenticity of the card data, available funds, and purchase limit are checked. If all the data is in order for the transaction to proceed, the amount payable is held on your card by your account-holding (card-issuing) bank. The debiting (deduction) of the amount from the account occurs within a few days, depending on the account-holding bank.

How does an online card purchase differ from a traditional one?
We distinguish between Card Present and Card Not Present transactions. A Card Present transaction takes place using a POS terminal device. After swiping the card and entering the PIN code, the terminal contacts the cardholder's bank via the authorisation centre, and through the VISA or MasterCard network, depending on the card type and issuer. This is where the validity and funds check (authorisation) takes place. Going back along the same route, the POS terminal (or the merchant) receives the approval or rejection. The customer signs the receipt. A Card Not Present transaction is one during which the bank card is not physically present. This includes transactions carried out by mail, telephone, or electronically (internet), where the customer (cardholder) initiates the transaction by entering the card details requested on a secure (256-bit encrypted) payment page. Upon a successful transaction, you receive a so-called authorisation number, which matches the number found on the paper-based receipt.

What does "hold" mean?
As soon as the bank becomes aware of the transaction, it is immediately followed by a hold (blocking), because the actual debit first requires the official data to arrive, which takes a few days, during which the purchased amount could otherwise be spent again. Therefore, with the hold, the spent or withdrawn money is set aside and blocked. The held amount is part of the account balance, i.e. it earns interest, but cannot be spent again. The hold ensures the rejection of transactions for which there is no longer coverage, even though the account balance would in principle still allow it.

FAILED PAYMENTS AND WHAT TO DO

In what cases can a transaction fail?
Generally, this is due to a payment order not accepted by the card-issuing bank (i.e. where the customer received the card); but in the case of card use, this can also occur because, due to a telecommunications or IT error, the authorisation request does not reach the card-issuing bank.

Card-related error
The card is not suitable for online payment.
Online use of the card is prohibited by the account-holding bank.
Use of the card is prohibited.
The card details (card number, expiry date, code on the signature strip) were entered incorrectly.
The card has expired.

Account-related error
There are insufficient funds to carry out the transaction.
The transaction amount exceeds the card's purchase limit.

Connection-related error
The connection was probably interrupted during the transaction. Please try again.
The transaction failed due to a timeout. Please try again.

Technical error
If you did not return from the payment page to the merchant's/service provider's page, the transaction is unsuccessful.
If you did return from the payment page, but then use the browser's "back", "reload" or "refresh" function to go back to the payment page, the system will automatically reject your transaction for security reasons.

What should I do if the payment procedure fails?
A transaction ID is always generated for the transaction, which we recommend noting down. If the transaction is rejected by the bank during a payment attempt, please contact your account-holding bank.

Why do I need to contact my account-holding bank if the payment fails?
During card verification, the account-holding (card-issuing) bank informs the collecting merchant's (acquiring) bank whether the transaction can be carried out. The acquiring bank cannot disclose confidential information about another bank's customer — only the bank that identifies the cardholder has the right to do so.

What does it mean if I received an SMS from my bank about the amount being held/blocked, but the merchant/service provider indicates that the payment was unsuccessful?
This can occur if the card was verified on the payment page, but you did not return to the merchant's/service provider's website. In this case, the transaction is considered incomplete and is therefore automatically deemed unsuccessful. In such cases, the amount is not debited from your card, and the hold is released.

SECURITY

What does VeriSign and the 256-bit encrypted TLS communication channel mean?
TLS, Transport Layer Security, is an accepted encryption method. Our bank has a 256-bit encryption key that protects the communication channel. The company VeriSign enables CIB Bank to use the 256-bit key, with which we ensure TLS-based encryption. Currently, this encryption method is used in 90% of the world's electronic commerce. Using TLS, the browser used by the customer encrypts the cardholder's data before sending it, so that it reaches CIB Bank in encoded form and cannot be interpreted by unauthorised persons.

After payment, my browser warned me that I was leaving the secure zone. Is my payment security still guaranteed?
Yes, completely. The payment process takes place over a 256-bit encrypted communication channel, so it is completely secure. After the transaction, you return to the merchant's website; if the merchant's page is not encrypted, your browser will warn you that you have left the encrypted channel. This does not pose any risk to the security of the payment.

What does the CVC2/CVV2 code mean?
In the case of Mastercard, it is called the Card Verification Code, and in the case of Visa, the Card Verification Value — a numeric value encoded on the magnetic stripe of the card that can be used to verify the authenticity of a card. The so-called CVC2 code, which is the last three digits of the number sequence found on the back of Mastercard/Maestro cards, must be entered during online purchases.

What does Verified by Visa mean?
Visa cardholders registered in the Verified by Visa system choose a password with the card-issuing bank, which they can use to identify themselves during online purchases, and which provides protection against unauthorised use of Visa cards. CIB Bank accepts cards issued within the framework of the Verified by Visa system.

What does Mastercard SecureCode mean?
Mastercard/Maestro cardholders registered in the Mastercard SecureCode system choose a password with the card-issuing bank, which they can use to identify themselves during online purchases, and which provides protection against unauthorised use of Mastercard/Maestro cards. CIB Bank accepts cards issued within the framework of the Mastercard SecureCode system.

What does the UCAF code mean?
For MasterCard/Maestro cards, this is a unique code that you may have received from your card-issuing bank. If you have not received one, leave the field blank.