Questions & answers

Visa, Mastercard and Maestro cards, Apple Pay and Google Pay out of the box, SEPA Direct Debit for euro accounts and e-wallets. Local methods such as iDEAL, Bancontact, Blik, Przelewy24 and MB Way are added on request, usually within a week, through the same integration. American Express is available on request through partner acquirers in selected regions — see the full list on the online acquiring page.

Customers can pay in 150+ currencies and see prices in their own. You settle in any of 25 currencies — EUR, USD, GBP, CHF, PLN, CZK and AED among them — and can hold several settlement accounts on Business and Enterprise. When the payment currency differs from the settlement currency, conversion is applied at the ECB reference rate plus a 0.5% mark-up, shown per transaction in the statement.

Yes. Subscriptions store the card as a network token and charge each renewal as a merchant-initiated transaction, with no extra 3-D Secure step and automatic card updates when the customer's card expires. Payment links and invoices are created in the dashboard or through the API in seconds and can be sent by e-mail, chat or QR code. Both are included in every plan — details on the recurring payments page.

Refund a payment in full or in part from the dashboard or with one API call; the money reaches the customer's card in 3–5 days depending on the issuing bank. A refund costs €0.10 and the fee of the original transaction is not returned. You can also authorise now and capture later — when the goods ship, for example — and you pay the fee only on the captured amount.

3-D Secure 2.2 sends the issuing bank around a hundred data points about the customer, the device and the order, and in most cases the payment is authenticated without any challenge. Where the issuer allows it, we request exemptions for low-value and low-risk transactions, so the customer sees a challenge only when something looks unusual. Merchants on Target see an average conversion of 88% with 3-D Secure switched on — our 3-D Secure 2 guide explains why.

Every transaction is checked against your rules first, then scored from 0 to 100 by a machine-learning model trained on the whole platform's traffic, with device fingerprinting and velocity limits built in. Low scores are authorised instantly, medium scores are challenged with 3-D Secure or sent to manual review, high scores are declined before they reach the bank. You edit the rules yourself in the dashboard, and fraud monitoring is included in every plan at no extra charge.

You see the case in the dashboard with the reason code and a pre-filled representment pack: delivery confirmation, IP and device match, 3-D Secure proof, communication history. A chargeback costs €15 when the issuer opens the case; if you win the dispute, the €15 comes back. On Business and Enterprise, chargeback alerts warn you within 24 hours of a dispute being raised, so you can refund the customer and avoid both the fee and the count against your ratio.

Card numbers are tokenised the moment they are entered and stored only inside Target's PCI DSS Level 1 environment; you receive a token, never the card number. Personal data is processed in UK and EU data centres only, under GDPR and the UK GDPR, and a data-processing agreement with the list of sub-processors is part of every merchant contract. The details are in our Privacy policy.

No setup fee on any plan and no monthly fee on Start; Business costs €99 a month from the first full calendar month after go-live. Declined transactions, the sandbox, plugins and support cost nothing. The only other fees are the ones printed on the pricing page: €0.10 per refund, €15 per chargeback, 0.5% on currency conversion and from €0.25 per payout.

Start if you are launching and want no fixed costs. Business pays for itself from roughly €20,000 a month — the 0.5 percentage points you save cover the €99 fee — and adds a personal manager, next-day settlement and chargeback alerts. Enterprise makes sense from about €500,000 a month, or when you need dedicated infrastructure, local acquirers and a 99.99% SLA. You can move between plans from the dashboard at any time; your integration and API keys do not change.

Yes. Above €150,000 a month, send us three months of statements and we will quote below the list rate, usually within one business day. From €500,000 a month you move to Enterprise and interchange++, where a blended rate under 1% on EU consumer cards is the norm rather than the exception.

Conversion is charged at 0.5% over the ECB reference rate, only when the payment currency differs from the settlement currency, and the rate used is shown on every transaction. To avoid it, add a settlement account in the currency your customers pay in — GBP for UK sales, USD for the US — and Target settles each currency to its own account without converting. How it works is explained on the currency conversion page.

Three, all built on the same payment object: the hosted payment page (fastest, no PCI scope on your side), the embedded widget that keeps the customer on your page, and the REST API with signed webhooks for full control of the checkout. Official SDKs cover JavaScript, Node.js, Python, PHP, Java and Kotlin/Swift for mobile. Everything is documented on the developers page, with samples you can run against the sandbox today.

Sandbox keys are issued the moment you sign up in the dashboard, before any contract. The sandbox behaves exactly like production and comes with test cards for every scenario — success, decline, frictionless and challenge 3-D Secure flows, partial refunds and chargebacks. When you are ready, swap sk_test_ for sk_live_; the code you wrote does not change. Card numbers and flows are listed in the sandbox section.

Register an HTTPS endpoint and Target sends a signed JSON event for every change: payment.succeeded, payment.failed, refund.created, chargeback.opened, subscription.renewed and more. Verify the signature, mark the order paid on payment.succeeded and never rely on the browser redirect alone — customers close tabs and networks drop. If your endpoint does not answer, we retry with exponential back-off for 72 hours, and any event can be replayed from the dashboard.

Yes. Card tokens are transferred directly between PCI DSS Level 1 providers in an encrypted migration — the data never passes through you — and subscriptions continue without asking customers to enter their cards again. The transfer takes two to four weeks depending on how quickly your current provider exports, and we run it in parallel with your integration so there is no gap in billing. Ask your manager to start it during onboarding.