Skip to main content
OID4Pay
Talk to us

How it works

A human approves. The merchant checks. Every payment leaves a receipt.

One mandate covers one payment. Here is the whole flow, who does what, and what is refused.

Talk to us about a pilot Try the verifier
Hands sign a paper with a fountain pen; a phone lies beside it

01 / The cast

Five parties, one payment.

The human

Approves one payment: the amount, the shop and the items.

The agent

Software that shops for the human. It carries the mandate, never the card.

The merchant

Offers goods, checks the mandate before the charge, and signs the receipt.

The payment provider

Runs its normal authorisation after the check. It keeps its processing.

OID4Pay

Signs the mandate when the human approves, and keeps an append-only audit record.

A bookshop owner leans on her counter beside a tablet register

02 / The flow

One mandate for one payment.

  1. Step 1 of 4

    A human approves

    The human sees the amount, the shop and the items. A second factor confirms it is them.

  2. Step 2 of 4

    OID4Pay signs the mandate

    Up to a limit, for one order at one shop, for a short time, and bound to the key of one agent.

  3. Step 3 of 4

    The agent presents it

    The agent sends the mandate to the shop. It never sends the card.

  4. Step 4 of 4

    The merchant checks before the charge

    Wrong shop, too late, wrong agent or over the limit: refused. Otherwise accepted, and the merchant keeps a signed receipt.

03 / What the check refuses

Anything that does not match is refused.

The merchant checks the mandate against the order in front of it. These are the cases the verifier tells apart.

  • The order is not the one the human approved offer_digest_mismatch Refused
  • The amount is over the approved limit over_limit Refused
  • The mandate is for another shop audience_mismatch Refused
  • The mandate has expired invalid_mandate_claims Refused
  • Another agent presents the mandate kb_jwt_jkt_mismatch Refused
  • The order, shop, time and agent all match Accepted

04 / Evidence trail

Four signed records for every payment.

Together they show what was offered, what was approved, who presented it and what was accepted.

  1. Merchant

    Signed offer

    What is for sale, and at what price.

  2. OID4Pay

    Signed mandate

    What the human approved.

  3. Agent

    Proof of the key

    Who presented it.

  4. Merchant

    Signed receipt

    What the merchant accepted.

05 / The human stays in control

What the human controls.

  • The human approves each payment: the amount, the shop and the items.
  • A mandate lasts 24 hours or less, and covers one payment.
  • The human can revoke an agent in the wallet. OID4Pay then cancels the agent's mandate.
  • The agent never receives the card.

06 / Honest limits

What it does not do today.

  • A mandate is not a budget for many payments. Put your own maximum in your agent.
  • Today OID4Pay runs in test mode. No real money moves.
  • The verifier is available now. OID4Pay does not operate a merchant for you.