Bancontact E-Commerce & Mobile

BEP Authentication

The Bancontact E-Commerce & Mobile (“BEP”) protocol is a Bancontact-specific authentication protocol. BEP is SCA-compliant and is used heavily across the Bancontact card network, allowing cardholders to authenticate transactions via the scanning of QR codes as well as through their Bancontact Intent mobile app. Silverflow has implemented BEP to support the following use cases:

An e-commerce payment initiated from a web page or a mobile app, typically displayed or executed on a device owned by the payer that is different from the device that will be used to proceed with the payment itself. For such payments, a QR-code is displayed on the pay page created by the merchant/PSP, and this QR-code will be scanned by the payer on another device (i.e. smartphone or tablet).
An e-commerce payment is initiated from a web page, typically displayed on a mobile device owned by the payer that will be also used to proceed with the payment itself. For such payments, an app-to-app call is made between the application within which the payment is initiated (either a mobile browser or a merchant app) and the Bancontact Intent payment app.

The POST/BEP endpoint allows an agent to authenticate a charge via the BEP protocol. Following a successful authentication, the transaction can proceed to a standard POST/charge flow by passing the bepKey.