Skip to main content

Hosted checkout

POST /collection/v2/create-charge returns a URL to redirect the payer to. Flick handles card, transfer and bank-selection on that page. Prefer this unless you have a specific reason not to — it keeps card data out of your systems entirely.

Direct card

If you are handling card details yourself, the flow is three calls:
1

Charge

POST /collection/charge
2

PIN

POST /collection/verify-pin
3

OTP

POST /collection/verify-otp
POST /collection/bin-lookup identifies the card scheme and issuer before you charge.
Handling raw card details puts you in PCI DSS scope. Hosted checkout does not.

Bank transfer (A2A)

POST /pay-out/payByBank starts an account-to-account payment where the payer authorises in their own bank.