April 2025 Boxopay Payment Gateway Update

Table of contents:

1. Key highlights
2. Minor updates and bug fixes

April brought several impactful enhancements across the Boxopay white-label payment gateway, delivered through multiple releases focused on new integrations, payment automation, and admin-side improvements.

Key highlights

New payment integrations

Alliancepay integration

Boxopay now supports payment processing through Alliancepay, expanding the available options for single-stage transactions. The integration includes Dynamic Currency Conversion (DCC), allowing administrators to specify a target currency and optional markup. This integration strengthens Boxopay’s reach for international transactions and offers more flexibility for currency management.

Apple Pay and Google Pay support via Xpate

Merchants can now offer Apple Pay and Google Pay checkout flows through the Xpate provider. Once configured in the terminal and project settings, the system returns dynamic payment URLs and branding elements to embed directly in the checkout page. This enables a seamless Open Banking flow for end customers and supports webhook handling for delayed completions. It’s a significant enhancement for PSPs looking to support mobile wallets via a unified flow.

Enhanced payment features

Smarter recurring payment handling across providers

Recurring payment support has been refined across several key providers to reduce integration complexity and improve reliability. Cardaq now automatically reuses transaction identifiers from the initial payment, simplifying follow-up charges. Cartu Bank GE adds consistent indicators for recurring flows, improving compatibility with local banking requirements. The embedded EMV 3-D Secure server now accepts detailed recurring parameters like start/end dates and frequency, with safeguards in place to prevent configuration errors. These updates make it easier for administrators to set up subscription-based services with fewer manual steps and better alignment across systems.

Reliable fallback logic for tokenized MasterCard payments via Azericard

Tokenized MasterCard payments via Azericard now benefit from improved fallback handling, reducing declines caused by missing authentication data.

Improved merchant and admin experience

ABO-format report export for Czech accounting systems

Merchants operating in the Czech Republic can now export settlement and transaction data in the ABO (Automatizovaný Bankovní Operace) format, directly from the merchant interface or via API. This feature includes support for multiple currencies and delivers structured data archives with detailed or aggregated commission entries.

Localized legacy payment page support

Legacy payment page versions are now accessible in Portuguese and Dutch, offering better usability for merchants targeting these regions.

Modernized client certificate support

Client certificates used for admin, merchant, or API access can now be generated in the modern x.509 version 3 format, as defined in RFC 5280. This update improves compatibility with current security standards and makes it easier to integrate Boxopay into infrastructures that rely on certificate-based authentication.

Separate blacklists per operation type

Administrators can now store card data used in different operation types into separate blacklists. This enables more granular risk and fraud rule application depending on transaction status or flow type.

Graceful shutdown mode for infrastructure

A new timeout parameter has been introduced to allow for safe shutdown of containers while active processes complete. This helps maintain service continuity during updates or failover scenarios.

Risk and fraud control enhancements

Smarter routing for Google Pay PAN_ONLY payments

Support for Google Pay PAN_ONLY has been improved with the ability to tag and route these transactions more precisely. PAN_ONLY refers to Google Pay flows where only the card number is used — typically on desktop browsers without device-based authentication. This update allows administrators to apply custom processing rules for such cases, enhancing control and flexibility in mobile wallet payments.

Compliance and authentication updates

Modirum MPI compatibility mode for Decta

The integration between Decta and Modirum has been improved to ensure smoother 3DS authentication and better compliance alignment.

Enhanced 3DS Method handling

When providers request 3DS fingerprint collection (via 3DS Method URLs), Boxopay now returns a fully prepared HTML form. Merchants can redirect customers directly to the form for data collection. This improves accuracy and compliance in EMV 3DS v2 flows.

Minor updates and bug fixes

Alongside the headline updates, Boxopay implemented a series of refinements aimed at improving overall system stability and compliance alignment. These behind-the-scenes improvements enhance the reliability of authentication flows, reporting accuracy, and event handling across the platform.

Looking for earlier updates? Check out the March 2025 Boxopay Payment Gateway Update.