How to Accept Card Payments on a Serbian Website: Bank, Gateway and Site

To take card payments on a website in Serbia you need three things: a contract with a bank that accepts cards for online merchants, a payment gateway that connects your site to that bank, and a website that meets the bank's and the law's requirements. The first real payment goes through only when all three are in place.

The usual hold-up is not the code but the content of the site. Banks send applications back when company details, delivery terms or a complaints page are missing, or when prices are not clearly shown in dinars.

This guide covers the whole path: what the bank asks for, what checkout looks like for the buyer, what the fee depends on, and how Raiffeisen, Banca Intesa and the independent gateways Monri WSPay, AllSecure and Chip Card differ.

We write from experience. We connected Raiffeisen card payments to our own website and client portal through the UPC e-commerce gateway, with 3D Secure and card tokenization for automatic subscription renewals.

IT Expert is a Belgrade team that builds custom web shops in Nuxt and Laravel, with no WordPress page builders, so we integrate payments directly in the site's code and know exactly what happens to every transaction.

ServiceWeb shop development

Who Is Involved in a Card Payment on Your Site

01Acquiring bank

The bank you sign the online card acceptance contract with. It authorizes transactions, pays out your turnover and charges the merchant fee.

02Payment gateway

The page or service where the buyer enters card details and confirms the payment. It can be the bank's own gateway or an independent service that works with one or more banks.

03Your website

Cart, checkout and confirmation. The site sends the amount to the gateway, receives the success or failure response, and only then confirms the order.

04Card data

When the buyer types the card on the bank's or gateway's page, the card number never touches your server. That keeps your share of PCI DSS obligations smaller.

05Merchant fee

The merchant pays it, not the buyer. Banca Intesa's terms require the card price to be the same as the cash price, with no card surcharge.

06Disputes

If a buyer disputes a charge, the bank asks for proof of the order and delivery. That is why every transaction record is kept, three years at Banca Intesa.

Documents and Steps With the Bank

Getting an online merchant account takes five steps: application, review of your business and website, contract, integration in a test environment, and go-live. Serbian banks offer e-commerce contracts to companies and to registered sole traders (preduzetnik).

At Raiffeisen you apply through an online form on the bank's site. Prepare your company details from the Serbian Business Registers Agency (APR), a contact person, a description of what you sell and the website address. Also check whether the bank requires a business account with it, since turnover is paid into an account.

At Banca Intesa the framework agreement consists of the general terms for the e-commerce service, the card acceptance contract and the fee schedule. The general terms are public on the bank's website. Read them before signing, especially the parts on disputes, refunds and record keeping.

For the integration the bank provides technical documentation, test cards and access to a test server. Test a successful payment, a declined card, an abandoned payment and a refund before you ask for production credentials.

From our Raiffeisen integration: verify the gateway response on the server (signature, amount and order number) and mark the order as paid only after that check. Refunds go only to the card that was charged, and all amounts are charged in Serbian dinars (RSD).

ServiceCustom software

GuideHow much a website costs

What the Buyer Sees and What the Bank Checks

The buyer goes through four steps: chooses card payment in the cart, enters the card on the payment page, confirms with 3D Secure, and returns to your site with a message that the order was paid or declined. After every successful payment you send the buyer a confirmation.

3D Secure is an extra confirmation with the bank that issued the card, usually in the bank's mobile app or with a one-time code. For Visa it is called Visa Secure, for Mastercard it is Mastercard Identity Check. Banca Intesa notes that 3D Secure also protects the merchant from card misuse.

Your site should show the logos of the cards you accept (Visa, Mastercard, DinaCard) and of the 3D Secure programs, usually in the footer and on the payment page. Use the logos your bank provides, because card schemes have rules on how they are used.

Serbia's Law on Electronic Commerce (Official Gazette RS 41/2009, 95/2013 and 52/2019), Article 6, requires your name and registered seat, contact details including email, register entry and tax ID (PIB) to be permanently available on the site. Banks also ask for an accurate product description, prices in dinars, delivery method and time, and complaint and refund terms.

Add a currency conversion statement: payments are made in dinars, and for buyers with foreign cards the amount on their statement may differ slightly due to conversion. Add a privacy policy and terms of sale aligned with the new Consumer Protection Law (Official Gazette RS 35/2026), most of which applies from 2 August 2026.

PlansWebsite packages

Card Processing Fees and Approval Time

There is no single price for online card processing in Serbia. The fee is agreed with the bank and depends on card type (debit or credit, domestic or foreign), volume, business activity and service package. Ask several banks for a written offer with the fee schedule.

Part of the fee is capped by law. Under the Law on Interchange Fees and Special Operating Rules for Card-Based Payment Transactions (Official Gazette RS 44/2018), the interchange fee on domestic transactions cannot exceed 0.2% for debit and 0.3% for credit cards. Your merchant fee is higher because it also includes scheme fees and the bank's margin. The law covers cards issued in Serbia, and in June 2026 the National Bank of Serbia published a draft amendment that would extend the cap to foreign cards.

Look at one-off and monthly costs as well. In October 2026 Raiffeisen's website offers e-commerce with no initial implementation fee and six months without the monthly fee, and Apple Pay and Google Pay are included at no extra charge. Handling of justified disputes is charged per the bank's tariff, and PCI DSS compliance is at your cost where it applies.

Approval time depends on how ready your site is when you apply, how quickly you send documents, and how long integration and testing take. The fastest route is a site that already has every required page and an integration that has passed on the bank's test environment.

Raiffeisen, Banca Intesa and Independent Gateways

01Raiffeisen Bank

E-commerce for Visa, Mastercard and DinaCard, plus Apple Pay and Google Pay, with 3D Secure. You apply online, and the bank also offers the RaiAccept card acceptance platform. We integrated through its UPC gateway.

02Banca Intesa

Offers e-commerce since 2007, with 3D Secure, installments on Intesa credit cards, recurring payments for subscriptions, PayByLink and card on file for later purchases. It provides test cards and a test server for integration.

03Other banks

Other banks in Serbia also offer online card acceptance, for example UniCredit Bank, which publishes separate e-commerce terms for companies. Compare the fee schedule, payout timing and the quality of the technical documentation.

04Monri WSPay

Monri Payments is part of the Payten group, and the WSPay online payment solution was brought under the Monri brand in 2023. It operates in Serbia and the region and works with several banks and financial institutions.

05AllSecure

A Belgrade-based payment gateway active in Serbia, Montenegro, Bosnia and Herzegovina and North Macedonia. It offers on-site payment without redirects, Visa, Mastercard, Dina and American Express, IPS, and plugins for WooCommerce, Shopify, Wix and Magento.

06Chip Card

A Belgrade payment processor offering web shop card acceptance, payment without redirects, PayByLink and recurring payments in a PCI DSS certified environment.

PortfolioResults from our projects

ContactTalk to us about payments

Frequently Asked Questions About Online Card Payments in Serbia

Does a flat-rate sole trader (paušalac) need a company to accept cards online?

No limited company is needed, because banks offer e-commerce contracts to sole traders too. If you sell goods, though, flat-rate taxation is not available: under the Personal Income Tax Law it is not granted for wholesale and retail trade. A flat-rate trader selling services can accept cards, and the tax side is worth checking with your accountant.

How long does approval of an online merchant account take?

Raiffeisen and Banca Intesa do not publish a fixed timeline on their websites. It depends on complete documents, whether the site already has every required page, and how quickly integration testing is finished. A site that is ready before you apply moves fastest.

Does Shopify Payments work in Serbia?

No. Serbia is not on Shopify's list of countries where Shopify Payments is available, so a Serbian store has to use a third-party payment provider. AllSecure, for example, lists a Shopify plugin. The other option is a custom web shop with a direct bank integration.

How do refunds work for card payments?

Refunds go through the bank's or gateway's system, to the same card that was charged, not in cash or by bank transfer. Banca Intesa's terms say refunds must be made only according to the bank's instructions. On our Raiffeisen integration refunds also go only to the original card, in dinars.

Is IPS instant payment a good alternative to cards?

It is a good addition. With IPS Skeniraj the buyer scans the NBS IPS QR code or opens their banking app on the phone and confirms, without entering card details. According to the National Bank of Serbia, banks that offer online card acceptance must also offer instant payment acceptance, so ask for IPS in the same offer.

Do I have to comply with PCI DSS?

Banks require it in the contract, and the scope depends on how you take cards. If the buyer enters card details on the bank's or gateway's page, the card never touches your server and your part is smaller. If you collect card data yourself, both obligations and costs grow.

How to Accept Card Payments on a Serbian Website