The weekly produce order
Six in the morning, the same crates as last week. The chef taps reorder on the pass and the saved card does the rest before service starts.
Saved cards & 3DS2
Repeat orders in one tap, and the card never touches your server.
A head chef reorders the same produce every week at six in the morning. With saved cards, the second order is one tap: the card was tokenised with the provider at the first order and only the token reaches Magento. Strong customer authentication runs when the rules say it must, and stays out of the way when they do not.
- Saved a card at checkout
- Reordered in one tapProduce ×12 · 340.00 EUR
- 3DS2 passed in the bank app
Why it matters
What changes for the business.
The second order is the easy one
Returning customers pay in one tap. For consumables, B2B replenishment and subscriptions, that is where the margin lives.
PCI scope you can live with
No card number is stored, displayed or transmitted by your systems. That keeps you on the lightest self-assessment questionnaire instead of a full audit.
Phone orders without the notebook
Staff charge a customer's saved card for a MOTO order with consent, so nobody writes a card number on a pad by the phone.
Authentication that adapts
3DS2 challenges appear when regulation requires them and are exempted where it allows: low value, trusted beneficiary, merchant-initiated. Returning customers are not challenged for the sake of it.
How it works
Step by step, from the first switch-on.
- 1
Tokenised at the first payment
When a customer pays and chooses to save the card, the provider vaults it and returns a token. Magento stores the token and the last four digits for display, nothing else.
- 2
Attached to the Magento customer
The saved card lives on the customer account, available in the checkout, in the admin for MOTO orders, and for subscriptions or merchant-initiated charges the customer agreed to.
- 3
Authenticated by the rules
On the next payment the suite requests 3DS2 where required and applies the exemptions the acquirer allows, so most repeat orders complete without a challenge.
- 4
Managed by the customer
Customers see and remove their saved cards from their account; you can expire tokens and see which cards are on file from the admin.
Ways merchants use it
Three places this earns its keep.
B2B buyers who order weekly, consumables and subscriptions, and any store where the second purchase matters as much as the first.
The delivery that follows
By eight the crates are at the back door. The order she tapped at six was paid on the saved card, invoiced to the restaurant's account and picked before the supplier's van left the yard.
Service, uninterrupted
What the saved card really buys is the evening: no phone call to the supplier, no card read out over the pass, no reorder left until tomorrow. The kitchen runs the service and the order runs itself.
What you need
Before you switch it on.
- ebizmarts Payments Suite, current release, with card vaulting enabled
- Saved-card display enabled in the checkout and, if wanted, in the admin for MOTO orders
- 3DS2 exemption preferences agreed with your acquirer and set in the suite
- A short line in your privacy notice explaining that cards are stored as tokens with the payment provider
Also in Payments Suite
Phone orders and payment linksMOTO from the admin with a secure prompt, or a pay-by-link by email or SMS.In-store and Tap to Pay on iPhoneTerminals at the counter and Tap to Pay on any recent iPhone, one ledger.Refunds, reports and ERP hand-offsRefunds from the credit memo; VAT-ready reports; payouts to Xero, SAP or NetSuite.Second chance on declinesA declined card gets a recovery path automatically, alongside your existing processor.B2B paymentsPay Now on invoices, deferred payment, quotes to cash and multi-currency for stores that sell to businesses.Multi-store, one ledgerOne install across every storefront, region and currency, with unified reconciliation.All 11 Payments Suite featuresBack to the overview.
Questions
What merchants ask before they turn it on.
Where is the card stored?
With the payment provider, as a token. Magento holds only the token and the last four digits for display.
Can staff use a saved card for a phone order?
Yes. A MOTO order from the admin can be charged to the customer's saved card with their consent, without asking for the number again.
Does this reduce my PCI scope?
Yes. Because no card data touches your systems, you qualify for the lightest self-assessment questionnaire rather than a full audit.
Can a customer delete a saved card?
Yes, from their account on the website. Deleting it removes the token; there is no card number anywhere to remove.
Do saved cards work with subscriptions?
Yes. Merchant-initiated payments the customer agreed to, such as subscriptions or instalments, run on the saved token with the appropriate 3DS2 exemption.
Turn it on, or ask us first.
The payments team will tell you plainly what switching this on involves for your store, and what it costs.