Accepting Online Payments in Azerbaijan: Comparing the Options

Online payment systems are the services and technical connections that let a buyer pay by card, account, e-money or another digital method, and let the business confirm the transaction and receive the funds.

For the buyer, this is one button. For the business, it is the contract, licences, fees, failed payments, refunds, security, bank transfers and accounting reconciliation.

The lowest percentage is not always the cheapest option. If a payment looks successful but no order is created, or a refund is tracked manually for days, the difference becomes an operating cost.

Who does what in the online payment chain?

The Law "On Payment Services and Payment Systems" distinguishes services such as payment accounts, transfers, card transactions, acquiring, electronic money, payment intermediation and account information. Behind one payment button, several of these roles can be present.

An e-commerce order does not have to be paid by card. Bank transfers and cash on delivery can also be in the sales model. Even so, when we say "online payment," the digital confirmation of the order, transaction tracking and the correct handover of the result between systems are what matter.

What payment acceptance options exist in Azerbaijan?

Do not choose an option by the sentence "it accepts cards." Where the buyer pays, what the business stores and how the result ties to the order change the security and operational load.

For an Instagram order, a payment link can work at the first stage. As orders, variants and the team grow, whose link it is, when stock decreases and which order the money belongs to can blur. The online store flow must standardise that connection.

How do you choose an online payment provider?

The Central Bank keeps open registers of payment institutions, electronic money institutions and banks. A different legal entity can sit behind the same familiar name; match the name and TIN in the contract against the register.

12 questions for the shortlist

1. Is the licence in force and does it cover acquiring activity?
2. What are the onboarding requirements for sole traders and legal entities?
3. How do AZN payments, local cards and foreign cards work?
4. Are there percentage, fixed, onboarding, monthly and minimum-turnover fees?
5. On what settlement schedule are funds transferred?
6. How are full and partial refunds done; is the fee returned?
7. How are payment disputes and cardholder chargebacks handled?
8. Which of the protected page, secure component, links and API are provided?
9. Are server notifications signed and can they be re-sent?
10. Is there a test environment, documentation, sample code and technical support?
11. Can transaction, fee, settlement and refund reports be exported?
12. On contract termination, how are open refunds and data export completed?

Do not stop at asking the provider "what percentage?" Get a written offer for the same real product, amount, platform, refunds and monthly transaction volume. A marketing page is not a substitute for the contract and technical documentation.

How should the payment integration work?

In a healthy flow, the browser's result page is not the only source of truth. The buyer can close the page, the internet can drop, or they may not return to the store after a successful payment. The order status must be confirmed by the provider's signed server notification and a follow-up query.

1. The store creates the order code, the currency and an immutable final amount.
2. The server obtains a payment session and a single-use link from the provider.
3. The buyer enters card data in the provider's protected environment.
4. The provider processes the transaction and shows the buyer a preliminary result.
5. The provider sends a signed notification to the store's server.
6. The store verifies the signature, order code, amount, currency and status.
7. If the same notification arrives again, the order and stock are not processed twice.
8. At day's end, the provider transactions, settlement and bank account are reconciled.

A screenshot can be altered and does not prove a bank transfer's link to the order. The "paid" notice to the customer should only go out after server confirmation. The technical team should store the transaction identifier — and must not store the full card number and security code.

On a platform like Shopify, separately verify the provider's official availability in the admin. A local provider offering an API does not mean it works out of the box with every store platform.

How is online payment's real cost calculated?

The percentage fee is only one line. The fixed transaction fee, the platform's extra charge, fees kept on refunds, disputes, currency conversion, settlement time and manual reconciliation are also the order's costs.

The numbers are not market tariffs; they are a calculation example. If on a refund 1.64 AZN of provider costs may not be returned and support may spend 10 minutes, turn that probability into a separate reserve. Measure marketing profitability not by the pre-payment sales amount but by the contribution after these costs.

What are the security and legal minimums for payments?

The PCI SSC's guide to safe payments for small merchants presents handing card data entirely to an approved third party as the safest route in most cases. That does not cancel all the business's responsibility; malicious code injected into the store page and wrong redirects remain risks.

Control the scripts and changes affecting the payment page, enable multi-factor authentication on admin accounts, keep secret keys out of code and browsers, and restrict access by role. The PCI SSC's 2025 e-skimming guidance gives special attention to the authorisation, integrity and change detection of payment page scripts.

The Law "On Electronic Commerce" provides the framework for disclosing the seller information, product, final price, tax, delivery, payment and withdrawal terms before the order. Even with payment set up correctly, the product description must not mislead the buyer. Clarify registration and the tax regime with an accountant using the State Tax Service's guide.

The order code, name, phone, address, IP record and payment identifier can link to personal data. Assess the purpose, legal basis or consent, minimum volume, access, retention, transfer to the provider and deletion under the Law "On Personal Data".

How do you run a 14-day online payment pilot?

1. Days 1–2: check the legal entity, licence, contract, tariffs and settlement schedule.
2. Days 3–4: set up the test environment, order codes, amounts, currency and signature verification.
3. Day 5: test successful, declined, abandoned and user-closed payments.
4. Day 6: send the same server notification twice and confirm no duplicate order appears.
5. Day 7: check full and partial refunds across the order, provider and bank records.
6. Day 8: test rejection of wrong amounts, currencies, signatures and stale notifications.
7. Day 9: reconcile the stock, email, receipt, courier and analytics events.
8. Day 10: check admin roles, multi-factor authentication, secret keys and log access.
9. Days 11–12: measure the settlement time and fees with low-volume real orders.
10. Day 13: reconcile the provider report with the bank and the order system.
11. Day 14: write down the errors, support time, real cost and the continue-or-stop decision.

Create the delivery task only after a confirmed payment. In the dropshipping model, separately protect the stock, amount and cancellation rules between the provider's confirmation and passing the order to the supplier.

Conclusion: the payment button is not the end of the system

Online payment's quality is not measured only by the card going through. The order, stock, provider, bank, refunds and accounting must see the same transaction with the same amount and status.

First check the licence, the real total cost and the way back. Then test all the exceptions. When that chain works, payment can remain a single button for the buyer.