Cards
Visa and Mastercard show up on PayPro and on Rapid Gateway. Rapid Gateway also lists UnionPay. Local and international cards are different commercial conversations, so ask which scheme the acquirer will actually settle.
Card checkout for merchants selling in Pakistan
A 2D payment gateway collects the card number, expiry date, and CVV. For a store in Pakistan that card step sits next to Raast, JazzCash, easypaisa, and a bank transfer. It does not replace those rails, and it does not mean every card payment skips a one-time password.
What the card step actually collects
On a 2D payment gateway the shopper types the details printed on the card. That is the card number, the expiry date, and the security code on the back. There is no separate screen that asks for a code from a text message unless the issuing bank adds one.
Pakistani acquirers do not all treat that step the same way. Rapid Gateway tells merchants that 3-D Secure authentication with an OTP verifies every card transaction on its gateway. A global article about a 2D payment gateway can describe a checkout with no OTP at all. Those two descriptions are both on the public web, and they do not cancel each other. If the card network or the issuing bank asks for a password, the shopper still has to enter it.
Use the card step for card-not-present sales. Use Raast, a wallet, or a transfer when the buyer wants to pay from a Pakistani account or a mobile wallet. Putting both on one checkout is a routing choice. Calling the whole checkout a 2D payment gateway does not turn a Raast payment into a card authorization.
Ways a buyer in Pakistan can pay
Raast
Raast is the instant payment rail from the State Bank of Pakistan. Rapid Gateway presents it as its own method, including QR, not as a card form with the CVV removed.
Mobile wallets
JazzCash, easypaisa, SadaPay, and NayaPay appear on both Rapid Gateway and PayPro. The buyer approves the payment in the wallet. That approval is not the same screen as a card number and CVV.
Bank transfer and QR
PayPro lists transfers through a wide set of Pakistani banks, plus over-the-counter agents. Rapid Gateway adds dynamic and static QR. A transfer needs an account credit. A QR payment needs a scan. Neither one is a 2D card capture.
Security that still applies
Card data should move on encrypted infrastructure that meets PCI DSS expectations. Faysal Bank describes a fraud module and says card-on-file tokenization can simplify a repeat payment. XPay describes tokenization so a returning shopper does not retype the card, and a fraud screen that can flag a risky payment. Rapid Gateway says card data is processed on compliant infrastructure and is not stored on the merchant server.
None of that is a promise that fraud cannot happen. A 2D payment gateway is easier to abuse if a card and its CVV are copied, because the extra password may be absent. That is why a merchant still wants velocity checks, a clear refund path, and a person who can read a dispute. PayPro says a refund is requested by the merchant and can take weeks on its own platform. Treat any settlement or refund timing as a term you confirm in writing, not as a number copied from another brand.
XPay also describes on-site checkout, so the buyer stays on the store instead of leaving for a hosted page, and dynamic routing across more than one acquirer. Those are product choices a Pakistani store can ask for. They still sit under the same rule: card data is encrypted, a wallet approval happens in the wallet, and Raast is a transfer. Mixing the three on one screen does not make them one authentication method.
What Pakistani onboarding usually asks for
PayPro says an individual cannot sign up on a personal account: the merchant needs a business bank account, and a sole proprietor can still apply. Faysal Bank says onboarding expects a Faysal Bank business account, a valid NTN, attested copies of CNIC, NICOP, or passport for the signatories, a signed merchant agreement, and a completed merchant data form.
Bring the website address and a short description of what you sell to the same conversation. PayPro asks for the business name, the site, the address, and the CNIC together with the bank coordinates. A mismatch between the account title and the name on the agreement is a common reason a file sits still. Sort that on paper before anyone discusses plugins.
Faysal Bank also says the gateway can show a payment page in more than one currency, including PKR, USD, GBP, EUR, and AED, and that settlement is still in PKR. That is a display choice, not a second wallet. If you sell to buyers outside Pakistan, ask which foreign cards the acquirer will accept and which currency the buyer will see. Do not assume an international card works because a plugin is installed. Rapid Gateway lists schools, retail, and small businesses among the kinds of merchants it serves. The category does not change the documents. A school and a shop both still need the account and the tax number the local providers name.
Those are documents named by Pakistani providers. They are not a licence number for 2D Payment Gateway, and this page does not invent one. A store that only has a consumer wallet will not match the account rules those providers publish. Have the business name, the website, the NTN, and the settlement account ready before the first technical call.
A Pakistani account is still required. Settlement for a merchant in Pakistan still lands in a Pakistani business account. The NTN and the signatory documents that local banks ask for still apply. A card form that does not show an OTP does not remove those account rules, and it does not make JazzCash or Raast behave like a card-not-present authorization.
How a store connects
- Confirm the business account, NTN, and the goods you sell. PayPro publishes categories it will not process, including firearms, alcohol, and gambling. If your catalogue is in that kind of list, say so before integration starts.
- Pick a connection style. Faysal Bank names plugins and code for WooCommerce, Magento, PHP, React, and .NET. PayPro names Shopify, WordPress, OpenCart, and Magento, plus APIs for Android and iOS. Rapid Gateway names a hosted checkout, an embedded widget, and a server API.
- Test with the acquirer’s sandbox or test cards, then switch the keys. Watch the first live payments for cards, wallets, and Raast separately. A card decline and a wallet timeout are different failures.
- Keep refunds and reports inside the merchant portal. Faysal Bank says transaction status can update in the portal and through an enquiry API. Someone on your team should know how to pull that report without waiting for a developer.
Questions merchants ask
Does every payment skip the OTP?
No. A 2D card form asks for the card number, expiry, and CVV. If the issuer or the acquirer runs 3-D Secure, the shopper still enters the one-time password. Wallet and Raast payments use their own confirmation.
Which methods are actually local?
Cards, Raast, JazzCash, easypaisa, other wallets, bank transfer, and QR are the methods named by Pakistani gateway pages. Availability depends on the acquirer you contract, not on a slogan.
Can a freelancer sign up with a personal account?
PayPro says no: it asks for a business or merchant bank account. A sole proprietor can be the business. Confirm the same point with whoever settles your funds.
Which shops can connect?
PayPro and Faysal Bank both describe plugins for common store software, and an API when the shop is custom. The plugin does not remove the need for a business account and NTN.
Continue with 2D Payment Gateway
Send your business name, a Telegram username, and an email. This form does not approve an account by itself.