Introduction

Welcome to the PayGlobe Payment Gateway, your complete platform for payment management, dispute handling, and chargeback prevention.

Main Features
  • Multi-gateway payments (IGFS, PayPal, Amazon Pay, Satispay, Bizum, Skrill)
  • Dispute and chargeback management
  • Pre-dispute alerts (Verifi, Ethoca)
  • Auto-refund engine
  • Risk analytics and dispute rate monitoring
  • Payment links with QR code
  • Bank integration (Unicredit AIS)
  • Workflow automation

Dashboard

The dashboard is your control center for monitoring all activities in your merchant account.

Dashboard summary cards and navigation tabs
The summary cards (Total / Completed / Failed / Pending) and the tab bar that gives access to every area of the dashboard.

Overview

At the top you'll find summary statistics:

Available Tabs

Tab Description
Transactions List and details of all transactions
Disputes Chargeback and dispute management
Alerts Pre-dispute alerts from Verifi/Ethoca
Risk Analytics Dispute rate monitoring and risk assessment
Payment Links Payment links and QR codes
Bank Account Incoming bank transfer monitoring
Workflows Process automation
Settings Account configuration

Transactions

View and manage all transactions processed by the gateway.

Merchant dashboard — transactions with analytics charts
Transactions view with Analytics: payment-method and status charts, hourly volume, daily revenue trend, per-method totals and the filterable transaction list.

Available Filters

Transaction Actions

View Details

Click the icon to see all transaction details including card data (masked), gateway used, and event timeline.

Refund

For COMPLETED transactions, you can issue a full or partial refund by clicking the icon.

The refund is recorded only when the gateway confirms it: if it is refused you get the reason and the transaction stays as it was, so a transaction marked refunded always means the money left. Partial refunds can be repeated until the captured amount is exhausted, and the status becomes PARTIAL_REFUNDED until then. On IGFS partial refunds are not available — that gateway can only reverse the whole amount, so a partial request is refused rather than reversing everything.

Transaction Details (Eye View)

Clicking the icon opens the complete detail of a transaction, organized in four blocks:

Transaction Details (eye view) with timeline
The eye detail: Transaction Information, Timestamps, the event Timeline and the gateway payment-leg details.
Note on the gateway shown

Every transaction created via the SDK initializes an IGFS hosted-page leg by default (the card path). If the buyer then pays with another method (e.g. Bizum), the Payment Method is the real one (BIZUM) while the leg details may still show the leftover IGFS initialization. The actual charge is identified by the leg that carries an authorization code (e.g. Bizum Ds_Response 0000); an IGFS leg without an authorization code was only the page setup, not a charge — so there is no double charge.

Tip

Use the "Export" function to download transactions in CSV format for accounting reconciliation.

Disputes (Chargebacks)

The Disputes tab shows all chargebacks received from card networks and pre-dispute alerts.

Disputes tab with status counters and the disputes table
Counters (Open, Under Review, Won, Lost, At Risk, Total Lost), date filters and the disputes list. Disputes arrive automatically from PSP webhooks, or you can add one with Add Dispute.

Dispute Status

Status Color Description
Alert (Pre-Dispute) Purple Alert received from Verifi/Ethoca - not yet a formal chargeback
Open Red Chargeback opened, awaiting response
Under Review Yellow Evidence submitted, under bank review
Evidence Required Cyan Additional evidence needed
Won Green Dispute won - funds returned
Lost Gray Dispute lost - funds debited

Responding to a Dispute

  1. Click the icon to open the dispute details
  2. Review the details: amount, reason, deadline
  3. Upload evidence (receipts, shipping tracking, customer emails, etc.)
  4. Write a response in the "Merchant Response" field
  5. Click "Submit Response" before the deadline
Important

Always respect the Response Deadline! After expiration, you can no longer submit evidence and the dispute will be automatically lost.

Accepted Evidence Types

Pre-Dispute Alerts

Pre-dispute alerts allow you to prevent chargebacks by refunding BEFORE they become formal.

Pre-Dispute Alerts tab with counters, monthly budget and auto-refund toggle
Alert counters (Pending, Auto-Refund, Refunded, Declined, Prevented, Amount Saved), the monthly alert budget and the Auto-Refund switch.

Alert Sources

Verifi RDR

Rapid Dispute Resolution by Visa. Receive real-time alerts when a cardholder initiates a dispute.

Verifi CDRN

Cardholder Dispute Resolution Network. Even earlier alerts, when the customer contacts the bank.

Ethoca

Mastercard fraud prevention system. Reports of confirmed fraud from the issuer.

Auto-Refund Engine

Configure the system to automatically refund alerts that meet certain criteria:

Parameter Description
Min/Max Amount Amount range for auto-refund. E.g.: 0-50 EUR = only refund small transactions
Delay (hours) Wait time before refund. Allows you to see the alert and decide manually
Excluded Codes Reason codes NOT to refund (e.g.: confirmed fraud)
Monthly Budget Monthly limit for auto-refund. Once reached, alerts go to manual review
Link with Disputes

Each received alert is automatically displayed in the Disputes tab with "Alert (Pre-Dispute)" status. This allows you to see both pre-dispute alerts and formal chargebacks in one place.

Risk Analytics

Monitor your dispute rate to avoid sanctions from card networks.

Risk Analytics with dispute-rate gauges and Visa/Mastercard thresholds
Current dispute rate, risk level and win rate, with the Visa and Mastercard rates measured against each network's threshold, plus 30-day trend charts.

Card Network Thresholds

Network Threshold Consequences
Visa 0.90% VDMP (Visa Dispute Monitoring Program) - Fines and monitoring
Mastercard 1.00% ECP (Excessive Chargeback Program) - Progressive fines

Monitored Metrics

Risk Levels

Level Dispute Rate Recommended Action
LOW < 0.50% Optimal situation, continue monitoring
MODERATE 0.50% - 0.75% Attention, analyze the causes of disputes
HIGH 0.75% - 0.90% Activate aggressive prevention, consider auto-refund
CRITICAL > 0.90% URGENT: Risk of sanctions, contact support

MO/TO — Telephone orders

Take a payment over the phone: the customer reads out the card details and your operator types them into the bank's page, inside your dashboard.

MO/TO tab: warning banner, the new-payment form and the bank's card entry panel
The MO/TO tab. Top: the warning that this terminal has no 3D Secure, with your terminal and the SAQ expiry date. Left: amount, order reference, description and the customer email the receipt goes to. Right: the bank's card page opens here — card numbers are typed in that panel, never in a PayGlobe field.
No 3D Secure, so no liability shift. If the cardholder disputes the charge, the money goes back to them and the loss stays with you. Use it for genuine mail and telephone orders, and always record which order it belongs to. PayGlobe stores which operator took the call — that record is half your defence.

Before you can use it

The tab only appears once PayGlobe has switched it on, and that happens after you provide two things: the dedicated MO/TO terminal issued by your acquirer (a separate one, with 3D Secure disabled) and your PCI SAQ. The tab closes by itself the day the SAQ expires — renew it before that date.

Taking a payment

  1. Open the MO/TO tab and enter amount, order reference and description
  2. Click "Apri l'incasso": the bank's card page opens on the right
  3. Type the card details your customer reads out, in that page
  4. The result appears on its own — it comes from the bank, not from the page
Card numbers never reach PayGlobe. The entry page belongs to the bank: we never see, store or log the number. Do not write it down anywhere else either — not on paper, not in the description field.

Bank Account (AIS)

Monitor incoming bank transfers to your business bank account for automatic order matching and reconciliation.

Bank Account Integration with connection status and the four-step flow
Connection status and the four-step flow — Connect (PSD2 Open Banking), Sync (fetch transfers), Match (by amount/reference) and Confirm.

Supported Banks

PayGlobe integrates with major European banks via PSD2 Open Banking APIs (Account Information Services - AIS):

Bank Country Status
Unicredit Italy, Germany, Austria Available
Intesa Sanpaolo Italy Coming Soon
BNL - BNP Paribas Italy Coming Soon
Deutsche Bank Germany Coming Soon
ING Netherlands, Italy, Germany Coming Soon
Revolut Business EU Planned

How to Connect Your Bank Account

  1. Click "Connect Bank Account" - In the Bank Account tab, click the green "Connect Bank Account" button to start the process
  2. Select your bank - Choose your bank from the list of supported institutions
  3. Authorize access via SCA - You will be redirected to your bank's website (e.g., Unicredit Online Banking) to log in and authorize PayGlobe to access your account information
  4. Select accounts - Choose which bank accounts you want to monitor for incoming transfers
  5. Confirm consent - Review and confirm the consent (valid for 90 days, then renewal required)
Security & Privacy

PayGlobe uses read-only access to your account. We can only view incoming transactions - we cannot initiate payments or access your credentials. All connections use bank-grade encryption and comply with PSD2 regulations.

Automatic Polling

Once connected, the system automatically fetches new incoming transfers:

Transfer Matching

The system tries to automatically match incoming transfers to your orders using:

Use Cases

Order Fulfillment

Automatically release orders when bank transfer payment is confirmed. No more manual checking!

Reconciliation

Match incoming payments with invoices for faster accounting and reduced manual work.

PSD2 Limit

PSD2 regulations limit API calls to 4 times per day per account. Use polling strategically (e.g.: morning, noon, afternoon, evening). The remaining polls for today are shown in the dashboard.

Pro Tip

Include a unique order reference in your payment instructions (e.g., "Payment for Order #12345"). This enables automatic matching and faster order processing.

Workflows

Automate actions based on payment events with the visual workflow builder.

Visual workflow builder — triggers, conditions and actions
The visual workflow builder: drag triggers (e.g. Payment succeeded), conditions (If / Then) and actions (Send email, Webhook, Tag customer, Create refund/dispute…) onto the canvas and connect them.

Available Templates

Available Triggers

Trigger Description
PAYMENT_COMPLETED When a payment succeeds
PAYMENT_FAILED When a payment fails
DISPUTE_OPENED When a dispute is opened
ALERT_RECEIVED When a pre-dispute alert arrives
REFUND_ISSUED When a refund is issued

API Keys

Manage API keys for programmatic integration.

API Keys tab with publishable and secret key and the regenerate button
The Publishable key (client-side) and the Secret key (server-side, kept hidden). Regenerate API Keys issues a new pair and invalidates the old one.

Key Types

Type Prefix Usage
Publishable Key pk_test_ / pk_live_ Frontend, checkout page (can be exposed)
Secret Key sk_test_ / sk_live_ Backend, API calls (NEVER expose!)

API Authentication

Authorization: Bearer sk_test_YourSecretKey
Security

The Secret Key must NEVER be exposed in the frontend or in public repositories. Use it only in server-side backend.

AI Agents

Let an AI assistant work on your account — read your takings, prepare payment links, issue refunds — with only the permissions you choose and a spending limit you set.

The assistant works for you, on your account. This is not a way for your customers to pay through an AI. It is your own tool, using your own data.

Why an agent gets its own key

You have one secret key, and your website and your systems already use it. If you gave it to an assistant, taking access away from the assistant would mean changing the key everything else depends on. So an agent gets a key of its own: revoking it changes nothing else.

Creating one

Open the AI Agents tab and choose New agent.

  1. Name it for what it does — it is what you will read when you have several and need to remove one.
  2. Say who runs it, if it is not you. An assistant run by an agency is not the same as one running on your own machine.
  3. Tick only the permissions it needs. Reading is enough for most assistants. Permissions that move money are marked.
  4. Set the limits if you granted refunds or captures. A maximum per operation is required; a daily maximum is worth setting too, or the per-operation limit can be worked around by repeating.
  5. Choose when it expires. Up to 90 days, and shorter is better.
The key is shown once. We store only a fingerprint of it, so we cannot show it to you again. Copy it into the assistant straight away. If you lose it, revoke the agent and create another — that costs you nothing.

Creating or removing an agent requires your secret key, not the publishable one: it is an owner's decision, not a everyday dashboard action.

What an assistant can be allowed to do

Reading your transactions, totals, payment links, disputes and subscriptions. And, if you allow it, three things that touch money: create payment links, refund a payment, and retry a failed subscription renewal.

Anything that moves money needs a ceiling from you, and the assistant is told those ceilings when it connects — including how much of today's allowance is left. It knows before it tries.

Watching what it does

The clock icon next to an agent shows its recent calls: what it asked for, for how much, and whether it was allowed.

Refused calls are kept on purpose. An assistant can be talked into things — it reads order descriptions, emails and tickets written by other people, and that text can try to give it instructions. An agent repeatedly asking for permissions it does not have is the sign that something is pushing it. That is exactly what you want to see.

Removing access

Letting an agent do the reordering

An agent can charge a card your customer has already saved — a weekly refill, a standing order — but only in a shape you control. You write the order first, with the amount and what kind of thing it is; the agent can only confirm it. It never picks the figure itself.

On top of your usual ceilings you can then say what it may buy: an amount per purchase, an amount per day, how many purchases per day, and which categories at all. That last one matters more than it looks: ten reorders of three euros break no money limit and are still ten deliveries nobody asked for.

Name one category and the list becomes closed. Anything you have not listed is refused, whatever the amount — so a new category in your catalogue never becomes spendable just because nobody remembered to forbid it. Use * for “everything else”.
Before you grant this one. A charge on a saved card does not go through 3-D Secure, so if the cardholder disputes it, the cost is yours. It is the right tool for a customer who comes back; it is the wrong tool for a first sale.

Revoking takes effect on the agent's next call. Nothing else on your account is touched. If an assistant starts behaving oddly, revoke first and work out why afterwards — you can always issue a new key in a few seconds.

Technical setup, including how to connect a tool such as Claude Desktop, is in the integration guide.

Webhooks

Receive real-time notifications when events occur in the gateway.

Webhook configuration with URL, secret and data-retention settings
The webhook URL, the signing secret (kept hidden, used to verify HMAC-SHA256 signatures) and the data-retention setting.

Configuration

  1. Go to Settings > Webhook Configuration
  2. Enter your Webhook URL (e.g.: https://yourserver.com/webhook)
  3. Copy the automatically generated Webhook Secret
  4. Implement signature verification in your backend

Signature Verification

Each webhook includes an X-PayGlobe-Signature header with HMAC-SHA256 signature:

// Node.js example
const crypto = require('crypto');

function verifyWebhook(payload, signature, secret) {
    const hmac = crypto.createHmac('sha256', secret);
    hmac.update(payload);
    return hmac.digest('base64') === signature;
}

Webhook Events

Payment Methods

Configure accepted payment methods.

Payment Methods configuration cards for PayPal and Amazon Pay
Each alternative method has its own card with an enable switch, environment (Sandbox / Live) and its credentials — here PayPal (enabled, sandbox) and Amazon Pay (disabled). Secrets are entered here and never shown back.

Available Gateways

Gateway Type Configuration
IGFS Credit cards Merchant ID, Secret Key
PayPal Wallet Client ID, Client Secret
Amazon Pay Wallet Merchant ID, Public/Private Key
Satispay Mobile payment Key ID, Private Key
Bizum (Redsys) Instant account-to-account (Spain only) Merchant Code (FUC), Terminal, Secret Key — or Redsys API Key
Skrill (Quick Checkout) Skrill wallet — and from the same page card, Neteller, Rapid Transfer, PaysafeCard Skrill account email, Secret word (Developer Settings), API/MQI password for refunds
Shift4 Credit cards Merchant ID, Signature Key

Recurring Payments (Subscriptions)

Charge your customers automatically on a recurring schedule — subscriptions, memberships, "Netflix-style" billing. It builds on Card Tokenization: the card is saved as a token on the first payment and reused for every following charge, with no buyer interaction.

Everything lives under the Subscriptions tab of the dashboard, which has four sub-tabs: Plans, Subscriptions, Dunning and Analytics.

The two building blocks

Step 1 — Create a plan

  1. Open the Subscriptions tab → sub-tab Plans → click + New Plan.
  2. Fill in name, price, currency and interval (e.g. €9.99 every 1 MONTH).
  3. Optionally set a trial (free days before the first charge), a setup fee or cancellation fee, and the duration (runs forever, a fixed number of cycles, or until a set date).
  4. Optionally add custom fields to collect at signup (order number, VAT, cost center…). Mark one text field as primary to have it auto-fill the merchantReference on every webhook.
  5. Save. The plan appears in the list with its own code.
New Plan dialog with pricing, duration, trial and retry options
The New Plan dialog: name and code, price/currency/interval, optional setup and cancellation fees, duration (infinite / fixed cycles / fixed end date), trial, and the retry policy.

Step 2 — Get customers subscribed

There are three ways a customer ends up with a saved card and an active subscription:

Subscription plan card with Edit, Share and Copy code buttons
Each plan card in the Plans sub-tab. Share generates the subscribe link (with QR code) to send to customers; Copy code gives you the plan code for the API.

Step 3 — Automatic billing & dunning

  1. At each cycle the gateway charges the saved token automatically (server-to-server, no buyer needed) and sends the standard webhook with the outcome.
  2. If a charge fails, the subscription enters Past Due and the retry engine takes over, following your retry policy (how many attempts, how many days apart, and what to do when they run out: cancel, pause, or mark unpaid).
  3. Optional dunning emails are sent before each retry, with a link for the customer to update their card.
  4. Every automatic charge also shows up in Transactions like any other payment, with its own payment ID and webhook.

Managing a subscription

From the Subscriptions sub-tab, the eye icon opens the detail; the row actions let you:

Active subscriptions table with status, next billing, MRR and per-row actions
The Subscriptions sub-tab: live counters (Active, Trialing, Past Due, MRR), filters, and one row per subscriber with status, next billing date, saved card and the pause / cancel actions. Customer identities are hidden in this example.

Status reference

StatusMeaning
TrialingIn a free trial; the first real charge hasn't happened yet.
ActiveBilling normally on schedule.
Past DueA charge failed; the retry policy is running.
PausedBilling suspended by you; no charges until resumed.
CanceledEnded by the customer, by you, or after the last failed retry.
EndedReached the end of a fixed-duration plan.
Tip

Recurring charges need a merchant configured for tokenization (payment mode SALE_WITH_TOKENIZATION). To reconcile with your own system, set a ?ref= on the share link or a primary custom field: that value comes back as merchantReference in every subscription webhook, so you can join it straight to your order.

For developers

The whole flow is also available over the API (create plans, enrol subscribers, import tokens, pause/resume/cancel/change-plan, set the retry policy) with the same sk_ secret key — endpoints, webhook events and code samples are in the Partner API docs.

IGFS Adapter

IGFS is a trademark and product of N&TS Group. PayGlobe is not affiliated with N&TS Group and is not authorised to distribute IGFS integration documentation. This section is not, and does not replace, that documentation: it is addressed only to merchants who already run a live IGFS integration and hold the corresponding N&TS documentation, and it describes only what changes in their configuration. Protocol specifications remain with N&TS Group.

If you already integrate directly against IGFS (N&TS/Nexi PGW REST), you can move onto PayGlobe without changing any code. The IGFS Adapter speaks the native IGFS wire protocol — same paths, same txHead/txReq/txRes JSON, same HTTP-Signature, same IGFS_000 — and routes everything to PayGlobe behind the scenes.

You change three configuration values and nothing else:

ValueBefore (real IGFS)After (adapter)
Base URL https://…netsgroup.com/MONEYNET_CG_SERVICES https://api.payglobe.it/MONEYNET_CG_SERVICES
merId (= signature keyId) assigned by N&TSissued by PayGlobe (max 16 chars)
secret (HMAC) assigned by N&TSissued by PayGlobe

The path stays /MONEYNET_CG_SERVICES on purpose: the HTTP-Signature covers (request-target), so changing the path would change the signed string and force a code change. Only the host moves.

Supported operations

Tokenizer endpoints (/pgw/tokenizer/check, /pgw/tokenizer/delete) are coming soon. Not available yet: /pgw/payment/selector, pay-by-mail and checkout — calling one returns 404.

What you gain by moving

The buyer lands on the PayGlobe checkout, so your unchanged IGFS integration can accept methods IGFS does not have — Bizum, PayPal, Satispay, crypto, meal vouchers. Your client still sees a normal successful IGFS transaction.

Two things to know before migrating. The buyer's address and cardholder details from the order block are not forwarded yet, and those feed 3DS2 and anti-fraud: expect more authentication challenges than with direct IGFS. And the async notification to your notifyURL may be disabled depending on your merchant's webhook configuration — poll /pgw/payment/verify, which is the authoritative source in IGFS anyway.

Full details, signature recipe and migration steps: igfs-adapter.html. To get test credentials, contact support@payglobe.it.

2FA Authentication

Two-factor authentication protects access to the dashboard.

User Management with the 2FA Status column and per-tab permissions
The Users tab: up to 5 users per account, each with a role, a 2FA Status and tab-level permissions. Admin users have access to everything.

2FA Setup

  1. On first login, you will be shown a QR code
  2. Scan the QR code with Google Authenticator or similar app
  3. Enter the 6-digit code generated by the app
  4. From now on, you'll need to enter the TOTP code at each login
Recommended Apps
  • Google Authenticator (iOS/Android)
  • Microsoft Authenticator
  • Authy
  • 1Password

Transaction Status Codes

Status Description
INITIATED Transaction initiated, awaiting user input
IGFS_PREAUTH_SUCCESS Card pre-authorization completed
VOUCHER_CHOICE_PENDING Awaiting voucher/meal voucher choice
COMPLETED Payment completed successfully
FAILED Payment failed
REFUNDED Payment fully refunded
PARTIAL_REFUNDED Payment partially refunded
CANCELLED Payment cancelled by user

Glossary

ARN (Acquirer Reference Number)
Unique transaction identifier assigned by the acquirer. Used to track the transaction in banking systems.
Chargeback
Forced refund request by the cardholder through their bank. Costs approximately €15-25 in fees plus the disputed amount.
Dispute Rate
Ratio between number of disputes and number of transactions in a period. Networks impose limits (Visa 0.9%, MC 1.0%).
IGFS
Internet Gateway Financial Services - Payment gateway for card transactions.
Pre-Dispute Alert
Early notification of a potential dispute, before it becomes a formal chargeback. Allows for preventive refunding.
PSP (Payment Service Provider)
Payment service provider that processes transactions (e.g.: IGFS, PayPal, Stripe).
RDR (Rapid Dispute Resolution)
Visa program for rapid dispute resolution through automatic refund.
SCA (Strong Customer Authentication)
Strong customer authentication required by PSD2. Includes 3D Secure for online payments.
TOTP (Time-based One-Time Password)
Time-based one-time password, used for 2FA authentication.
Webhook
HTTP notification sent by the gateway to your server when an event occurs (payment, dispute, etc.).

Support

Email

support@payglobe.it

Response within 24 business hours

API Documentation

Partner API Documentation

Complete integration guide

Company Information

PayGlobe S.r.l.
Crafted with passion by engineers right on Lake Como
PayGlobe™ is a registered trademark.