Bancontact E-Commerce & Mobile

BEP Authentication

The Bancontact E-Commerce & Mobile (“BEP”) protocol is a Bancontact-specific authentication protocol. BEP is SCA-compliant and is used heavily across the Bancontact card network, allowing cardholders to authenticate transactions via the scanning of QR codes as well as through their Bancontact Intent mobile app. Silverflow has implemented BEP to support the following use cases:

An e-commerce payment initiated from a web page or a mobile app, typically displayed or executed on a device owned by the payer that differs from the device used to proceed with the payment itself. For such payments, a versatile QR code is displayed on the pay page created by the merchant/PSP, and this QR code can be easily scanned by the payer on another device (i.e., smartphone or tablet), showcasing the adaptability of BEP.
An e-commerce payment is initiated from a web page, typically displayed on a mobile device owned by the payer that will also be used to proceed with the payment itself. For such payments, a secure app-to-app call is made between the application within which the payment is initiated (either a mobile browser or a merchant app) and the Bancontact Intent payment app, ensuring the utmost security of the transaction.

The POST/BEP endpoint allows an agent to authenticate a charge via the BEP protocol. After successful authentication, the transaction can proceed to a standard POST/charge flow, bypassing the bepKey.