Accept Payments Online with Cybersource

Frequently Asked Questions

• 

  What is the Cybersource payment gateway?

  The Cybersource payment gateway is a Visa-owned platform that connects a business website, app, virtual terminal or payment device to its merchant account and payment processor. Founded in 1994 and acquired by Visa in 2010, Cybersource supports online, in-app, in-person and manually entered transactions and connects to more than 200 acquirers and processors.

• 

  Is Cybersource part of Visa Acceptance Solutions?

  Yes. Visa announced in April 2023 that Cybersource is part of Visa Acceptance Solutions, its partner-focused payments offering, and said existing Cybersource services and contracts would not change. Cybersource kept its name. Some Cybersource developer documentation is now published under the Visa Acceptance Solutions name, and Visa Acceptance Solutions is listed as the developer of the Cybersource app for Shopify.

• 

  Is Cybersource a merchant account or a payment gateway?

  Cybersource is a payment gateway, not a merchant account. A business still needs an approved Cybersource merchant account relationship with an acquiring bank or processor, and Cybersource routes each transaction to that acquirer through more than 200 supported acquirer and processor connections. AllayPay provides U.S. merchant accounts as a registered ISO/MSP of Fifth Third Bank, N.A. and confirms processor compatibility before any gateway setup.

• 

  What is the difference between Cybersource and Authorize.net?

  Cybersource and Authorize.net are both Visa-owned payment gateways, and Cybersource acquired Authorize.net in 2007. Authorize.net serves small businesses. Cybersource was built for medium and large merchants and adds enterprise tools such as Decision Manager and Token Management Service. AllayPay offers Authorize.net directly.

• 

  What payment methods does Cybersource support?

  Cybersource supports Visa, Mastercard, American Express, Discover, Diners Club, JCB, Maestro, China UnionPay, Elo and Cartes Bancaires, plus eCheck, Apple Pay, Google Pay, Click to Pay, Paze, PayPal, Venmo and Buy Now, Pay Later options. Availability depends on the merchant account, processor, country and integration setup.

• 

  Can I accept payments through my website with Cybersource?

  Yes. A Cybersource gateway integration for a website can use Unified Checkout (a pre-built payment form), Microform (hosted card fields inside your own checkout page), Pay by Link, the REST API or an official plugin for WooCommerce, Adobe Commerce, Salesforce Commerce Cloud or SAP Commerce Cloud. Unified Checkout and Microform keep card data off your servers, which lowers PCI scope.

• 

  Does Cybersource integrate with eCommerce platforms and business software?

  Yes. Cybersource offers official plugins and extensions for WooCommerce, Adobe Commerce (formerly Magento), Salesforce Commerce Cloud and SAP Commerce Cloud. Cybersource also publishes its own SuiteApp for Oracle NetSuite SuitePayments, Zuora maintains a Cybersource gateway integration on its billing platform, and Cybersource REST API SDKs cover Java, .NET, PHP, Node.js, Python and Ruby.

• 

  Does Cybersource work with Shopify?

  Yes. A Cybersource app for Shopify, developed and supported by Visa Acceptance Solutions, launched in the Shopify App Store on January 10, 2025. The app is listed as free to install and supports Decision Manager fraud screening, Payer Authentication, Apple Pay and Google Pay in checkout and Shopify Subscriptions. Shopify sets its own store compatibility requirements, so check the app listing before you plan a migration.

• 

  Does Cybersource include a virtual terminal?

  Yes. The Cybersource Virtual Terminal is a browser-based tool in the Business Center that lets authorized users key in card or eCheck payments without a card reader or other hardware. Cybersource says the Virtual Terminal is free with a Cybersource account and runs on Windows or Mac in Chrome, Safari, Firefox or Edge. eCheck is available for U.S. customers only.

• 

  Can Cybersource process recurring payments?

  Yes. Cybersource Recurring Billing lets merchants create payment plans and subscriptions on a set schedule. It pairs a billing plan with a secure customer token, and merchants can manage it in the Business Center or through the REST API.

• 

  Can Cybersource store customer payment methods?

  Yes. The Cybersource Token Management Service turns customer card data into secure tokens stored in Visa data centers. Merchants can run repeat and recurring payments without storing full card numbers in their own systems. It also processes network tokens from card networks such as Visa, Mastercard and American Express.

• 

  What is Cybersource Unified Checkout?

  Cybersource Unified Checkout is a pre-built payment interface that shows cards, eCheck, Apple Pay, Google Pay, Click to Pay, Paze, PayPal, Venmo and Buy Now, Pay Later options in one place. Merchants can display it as a sidebar overlay or embed it inline in their checkout page. Cybersource lists Unified Checkout as PCI SAQ A compliant for eligible integrations because payment data never touches the merchant’s systems.

• 

  What is Cybersource Microform?

  Cybersource Microform is a hosted fields solution that places secure, Cybersource-hosted card entry fields inside your own checkout page. Customers stay on your site, while card data goes straight to Cybersource and bypasses your servers. Microform suits merchants who want to design their own checkout while keeping raw card data off their systems.

• 

  Can I send invoices through Cybersource?

  Yes. Cybersource Invoicing lets merchants create, send and track invoices. Customers pay on a secure Cybersource-hosted page from any device, and merchants can add their logo, brand color and automated payment reminders.

• 

  Does Cybersource support payment links?

  Yes. Cybersource Pay by Link creates secure payment links that merchants can share across digital and printed marketing. Merchants choose purchase links with a fixed price or donation links where the customer sets the amount, and the Pay by Link API can automate creating and managing links. Unified Checkout must be enabled on the merchant account before Pay by Link can be used.

• 

  Does Cybersource support ACH and eCheck payments?

  Yes. Cybersource eCheck payments let U.S. merchants debit a customer’s bank account through the REST API, Unified Checkout, Pay by Link, Invoicing and the Business Center Virtual Terminal. Merchants can use eCheck for one-time debits and for recurring subscriptions. eCheck is available for U.S. customers only and requires an ACH processing approval on the merchant account.

• 

  What fraud prevention tools does Cybersource provide?

  Cybersource Decision Manager screens orders with machine learning models and merchant-set rules, drawing on insights from more than 269 billion VisaNet transactions, with average screening times under 600 milliseconds. Replay lets merchants test new fraud rules against historical transactions before going live. Merchants can add Account Takeover Protection, Payer Authentication (3-D Secure) and Managed Risk Services, an outsourced review team available 24/7.

• 

  Is Cybersource PCI compliant?

  Yes. Cybersource is a certified Level 1 PCI Service Provider. Unified Checkout, Microform and tokenization cut the amount of card data a business handles. Merchants must still complete the PCI requirements that apply to their own payment environment.

• 

  Can Cybersource help reduce failed recurring payments?

  Yes. Cybersource Account Updater keeps eligible stored card details current when a card expires or gets replaced. Account Updater connects to Visa Account Updater and Mastercard Automatic Billing Updater, and adds American Express updates for merchants using Token Management Service. Account Updater only refreshes card credentials, so a payment the issuer declines for another reason still needs retry or customer follow-up.

• 

  Can I issue refunds and void transactions through Cybersource?

  Yes. Authorized users can refund transactions and void eligible transactions through the Business Center or supported API integrations. Some plugins, such as the WooCommerce plugin, also run refunds and voids from the store admin.

• 

  Does Cybersource provide APIs and webhooks?

  Yes. Cybersource provides REST APIs, developer guides, a sandbox, a live API console and REST SDKs for six languages. Webhooks send notifications for fraud alerts, invoice status updates, network token changes and recurring billing activity. Cybersource recommends JSON Web Token (JWT) authentication, and merchants using HTTP Signature messaging must migrate to JWT with Message-Level Encryption by March 2027 or risk transaction failures.

• 

  Is Cybersource suitable for enterprise payment processing?

  Yes. Cybersource has served medium and large businesses since 1994 and says it is trusted by more than 480,000 customers to power over $691 billion in transactions each year. Cybersource offers payment acceptance in 97 percent of countries and territories, global tax and currency tools, Token Management Service, Decision Manager and Managed Risk Services for outsourced fraud review.

• 

  Can high-risk merchants use the Cybersource payment gateway?

  A high-risk business can use the Cybersource payment gateway only if the acquiring bank behind its merchant account approves the business, because Cybersource routes transactions to one of more than 200 acquirers and processors rather than underwriting merchants itself. AllayPay specializes in high-risk merchant accounts and offers Authorize.net, NMI and Fluid Pay directly, so AllayPay can match an approved high-risk account to a gateway that supports it.

• 

  What is a good alternative to Cybersource for high-risk merchants?

  AllayPay offers three gateways directly for high-risk merchants: Authorize.net (also owned by Visa), NMI and Fluid Pay. AllayPay boards U.S. businesses in industries such as CBD and Delta 8, nutraceuticals, research peptides, travel, firearms and credit repair. AllayPay matches each approved account to the gateway that fits its industry.

• 

  How much does the Cybersource payment gateway cost?

  Cybersource does not publish standard pricing; its product pages direct businesses to contact sales for a quote. The Cybersource Virtual Terminal is included free with a Cybersource account. Merchant account processing rates are separate, so request a quote from AllayPay.

• 

  Why use AllayPay® for a Cybersource payment gateway?

  AllayPay provides the U.S. merchant account that any payment gateway needs. AllayPay, Inc. has operated from Plantation, Florida since 2016, serves more than 1,000 active merchants and processes over $1.1 billion a year as a registered ISO/MSP of Fifth Third Bank, N.A. Merchants get a dedicated U.S.-based account manager, chargeback monitoring and direct access to Authorize.net, NMI and Fluid Pay.

• 

  How do I get started with Cybersource through AllayPay®?

  Start with AllayPay’s free quote form. AllayPay reviews your industry, processing history and the Cybersource features you need, such as Decision Manager, Recurring Billing or eCheck, then confirms whether your approved merchant account can connect to Cybersource or whether Authorize.net, NMI or Fluid Pay is the better fit. AllayPay offers same-day approvals for many businesses.