How Global Online Payments Work: A 2026 Guide for Software Businesses
Payments

How Global Online Payments Work: A 2026 Guide for Software Businesses

How cross-border card payments, wallets, tax, and settlement actually work — why payments fail abroad, and how to raise acceptance when you sell worldwide.

Waffo Pancake Team11 min read
In short

A global online payment moves through authorization, fraud and 3DS checks, currency handling, and settlement — and fails more often across borders. Raising international acceptance comes down to local payment methods, smart retries, and the right tax handling. With Waffo Pancake as Merchant of Record, you accept cards, Apple Pay, and Google Pay across 173 countries with tax handled for you.

Key takeaways
  • A payment is not one step — it is authorization, risk/3DS checks, currency handling, and settlement, each a place it can fail.
  • Cross-border payments fail more than domestic ones; local methods and smart retries recover much of that.
  • Offering the payment methods your customers expect directly reduces checkout abandonment.
  • Tax is part of the payment flow — a Merchant of Record removes that work from your side.
  • Waffo Pancake accepts Visa/Mastercard, Apple Pay, and Google Pay across 173 countries as your MoR.

Selling software internationally sounds like flipping a switch. In practice, every payment crosses banking networks, risk systems, currencies, and tax regimes — and each layer is a place revenue can leak. A checkout that converts in your home market can quietly lose a fifth or more of its international attempts to declines and abandonment that never show up as errors in your own logs. This guide explains how a global payment actually works, end to end, and where to focus to get more of them through.

The anatomy of a global payment

A single card transaction looks instant to the customer, but behind the spinner it passes through five or six parties in under two seconds. Understanding who they are makes every later problem — declines, fees, currency surprises — legible.

The authorization path runs like this:

  1. Cardholder enters card details (or taps a wallet) at checkout and submits.
  2. Merchant — your site, or the platform acting on your behalf — packages the request and sends it on. It never sees the raw card if tokenization is done right.
  3. Acquirer (the merchant's payment processor or acquiring bank) receives the request and routes it into the card networks.
  4. Card network — Visa, Mastercard — acts as the switchboard: it identifies the issuing bank from the card number and forwards the authorization request.
  5. Issuer (the cardholder's bank) makes the real decision. It checks the balance or credit line, runs fraud and risk scoring, applies any 3D Secure rules, and returns an approve or decline.
  6. Response travels back along the same chain — issuer → network → acquirer → merchant → cardholder — carrying either a success or a coded decline reason.

Authorization only reserves the funds. Money does not actually move yet. Later, capture tells the issuer to commit the held amount, and later still settlement and clearing is the batch process where the networks and banks reconcile and the funds flow from issuer to acquirer to the merchant's account, minus fees. Domestically this entire dance is invisible and reliable. Across borders, every hop adds latency, cost, and a fresh reason to say no.

Two words worth keeping straight: authorization is the bank saying "yes, these funds exist and I'll hold them," while settlement is the money actually arriving days later. A payment can authorize successfully and still run into currency, fee, or tax complications before it settles — which is why acceptance and settlement are two separate problems to solve.

Why payments fail abroad

International transactions are declined more often than domestic ones, and most of those declines are recoverable rather than genuine "no money" rejections. The reasons cluster into a few buckets.

Soft vs. hard declines. A soft decline is temporary — a bank security hold, an issuer time-out, a network error, a velocity throttle from too many attempts. The same card will often succeed on a retry once the bank's caution clears, with the customer doing nothing. A hard decline is permanent at the current state — a lost, stolen, frozen, or expired card, or a definitive fraud block — and no amount of retrying helps until the customer switches cards or fixes their input. Telling these apart is the single most important decision in payment recovery; retrying a hard decline on a fixed schedule just burns attempts and can add fraud signals.

Common decline reasons on cross-border traffic:

3D Secure 2, SCA, and PSD2 friction. In Europe, PSD2 mandates Strong Customer Authentication (SCA) for most online card payments, and 3D Secure 2 (3DS2) is the technical layer that delivers it. Done well, 3DS2 authenticates the cardholder silently in the background (frictionless flow) or with a quick app approval or one-time code, raising approval rates and shifting fraud liability to the issuer. Done badly — a clunky redirect, a slow OTP, a broken mobile flow — it becomes a step customers simply abandon. A clean 3DS implementation is one of the highest-leverage levers on international acceptance, not a tax to be avoided.

For the full decline taxonomy — soft vs. hard, the specific failure groups, and exactly which retries recover revenue — see Why Payments Fail →

Levers to raise acceptance

Acceptance is not luck; it is a stack of well-understood techniques. The biggest gains on cross-border traffic come from these.

A useful mental model: the acceptance funnel has two halves. The first is before authorization — does the customer even see a method they trust, in their language and currency? The second is during and after authorization — is the transaction routed, authenticated, and retried well? Most teams obsess over the second half and ignore the first, where a surprising amount of revenue is lost silently to abandonment.

Payment-method localization by region

This is industry context, not a feature list — but it explains why a cards-only checkout underperforms in some markets. Buyer preferences are strongly regional:

The practical takeaway is to match your method mix to where your customers actually are, rather than assuming the world checks out the way your home market does.

Industry context only — Waffo Pancake accepts Visa, Mastercard, Apple Pay, and Google Pay at checkout. The regional methods above (SEPA, iDEAL, PIX, Alipay, WeChat Pay, local wallets) are described to explain global buyer behaviour; they are not Pancake payment options. Cards plus Apple Pay and Google Pay cover a large, geography-spanning share of digital spend, which is what Pancake is built around.

Presentment vs. settlement currency, and FX

Two currencies matter in any cross-border sale, and conflating them is a classic source of confusion.

When the two differ, a foreign-exchange (FX) conversion happens in between. That conversion carries an FX margin, and the transaction may also incur cross-border / international fees that networks and acquirers apply when the card's country and the merchant's country don't match. None of this is visible to the buyer, but it directly affects your net revenue. The levers are: price in local currency to win the sale, understand which fees apply on the corridor, and know the rate at which your provider settles back to you.

Tax and settlement: the hidden half

Getting the payment approved is only half the job. The other half — tax and settlement — is where international selling gets genuinely hard, and where most software teams underestimate the work.

With a plain payment gateway, you are the merchant of record. That means you are responsible for figuring out where you have a tax obligation (VAT in the EU and UK, GST in several countries, US sales tax by state, consumption tax in Japan, and dozens more), registering in each, charging the correct rate at checkout, filing returns, and remitting what you collected — per jurisdiction, on each jurisdiction's schedule. For a small team selling into many countries, that is a real and growing operational burden that has nothing to do with your product.

A Merchant of Record (MoR) changes the structure. The MoR becomes the legal seller on the transaction. It calculates and collects the right tax at checkout, files and remits across the countries it covers, and settles net revenue back to you. The tax obligation, and the chargeback and fraud liability that ride on each charge, sit with the MoR rather than your account. That is the single biggest reason software businesses adopt the model when they go global.

173countries where Waffo Pancake handles tax as Merchant of Recorddocs.waffo.ai/mor 3.9% + $0.50per successful transaction — no monthly or setup feesdocs.waffo.ai/mor/fees 3checkout languages: English, Chinese (Simplified), Japanesedocs.waffo.ai

With Waffo Pancake as your MoR, you accept Visa and Mastercard, Apple Pay, and Google Pay across 173 countries, with 3D Secure handled inside the flow and tax handled for you. The two-step checkout collects email, country, and billing details first — for tax and order processing — then takes payment, and renders in English, Chinese (Simplified), and Japanese. Pricing is 3.9% + $0.50 per successful transaction, with no monthly or setup fees. Payouts are currently in CNY (to a mainland-China bank card or Alipay), with more corridors on the roadmap.

New to the Merchant-of-Record model? Start with What Is a Merchant of Record, then compare options in Waffo Pancake vs. Stripe.

A practical acceptance checklist

If you are setting up — or auditing — global payments, work through these in order:

  1. Show local presentment currency wherever you can; price feels native and converts better.
  2. Localize the checkout language to the buyer, not just your home market.
  3. Offer the methods your customers actually use — at minimum cards plus Apple Pay and Google Pay, which span most geographies.
  4. Implement a clean, frictionless 3D Secure 2 flow so SCA helps rather than hurts approvals.
  5. Use network tokens and a card account updater so reissued cards keep working on recurring charges.
  6. Route through local acquiring where your volume justifies it, to look domestic to issuers.
  7. Classify declines and retry only the recoverable ones, timed to when bank holds reset — automate this as dunning for subscriptions.
  8. Decide who owns tax and settlement before you scale: do it yourself per jurisdiction, or hand it to a Merchant of Record.

Get the first half right and more customers reach a successful authorization. Get the second half right and that approved revenue actually lands in your account, clean of tax and compliance overhead. A global payment is only "done" when both halves are.

Accept cards, Apple Pay, and Google Pay across 173 countries — tax handled for you.

See Pancake pricing

Go deeper on soft vs. hard declines and which retries actually recover revenue.

Read the declines field guide

This article is general information, not tax, legal, or financial advice. Tax rates and rules change; verify current requirements with the relevant authority or a qualified advisor before acting.

Frequently Asked Questions

Why do international card payments fail more often than domestic ones?

Cross-border transactions face stricter issuer risk checks, currency and routing complexity, and 3D Secure friction. Issuers decline unfamiliar foreign merchants more readily. Local acquiring, smart retries, and offering familiar local payment methods are the main levers that recover otherwise-failed international payments.

Do I need to support local payment methods to sell globally?

It helps. Many customers abandon checkout if their preferred method is missing. Cards plus Apple Pay and Google Pay cover a large share of global digital spend; deeper local-method coverage raises acceptance further in specific markets. Match your method mix to where your customers actually are.

Who handles tax on a global online payment?

With a plain payment gateway, you do — you register, collect, and remit tax in each market. With a Merchant of Record like Waffo Pancake, the MoR is the legal seller and handles tax calculation, collection, and remittance across the countries it covers, so it is removed from your checkout-to-settlement flow.

What is the difference between presentment currency and settlement currency?

Presentment currency is what the customer sees and is charged at checkout; settlement currency is what lands in the merchant's account after processing. When they differ, a foreign-exchange conversion happens in between, with an FX margin and sometimes cross-border fees. Showing prices in the buyer's local presentment currency lifts conversion, while settlement currency determines what you actually receive.

What does a 3D Secure (3DS) step do during an international payment?

3D Secure 2 is the authentication layer behind SCA under PSD2 in Europe. It lets the issuer verify the cardholder — often silently, sometimes with a one-time code or app approval — before approving the charge. Done well it shifts fraud liability and raises approvals; done badly it adds a step customers abandon. A clean, low-friction 3DS flow is one of the highest-leverage acceptance levers on cross-border traffic.

WP
Waffo Pancake Team

Waffo Pancake is a Merchant of Record platform for developers and solo founders — we handle global payments, tax, and compliance across 173 countries so you can focus on building. Our team writes these guides from hands-on payments and billing experience.

About Waffo Pancake →

Related articles

How Global Online Payments Work: A 2026 Guide for Software Businesses — Waffo Pancake