Online Card Payments on a Website in Serbia - What Options Exist

The moment a website needs to sell online - a product, a service, a course, a booking - the first question becomes how to accept money by card. In Serbia the options exist, but they are scattered across banks, processor firms and foreign providers, and it is not always obvious what works, what does not, and what it will actually cost. This guide, from the perspective of a Novi Sad agency, walks through every serious option for accepting online card payments in Serbia in 2026 - from bank internet payment gateways, through regional processors like CorvusPay and Monri, to IPS QR instant payments and foreign solutions like Stripe and PayPal, with real fees, documentation and activation timelines.

The short answer - what options actually exist

In Serbia in 2026 you have five groups of realistic solutions for accepting online card payments. The first group is bank IPG (Internet Payment Gateway) - Banca Intesa, UniCredit, Raiffeisen, NLB (Komercijalna), OTP, AIK; they require an open merchant account with the bank and activation takes 4-8 weeks. The second group is regional payment service providers - CorvusPay, Monri, AllSecure, Chip Card; they sit between the bank and your site and often activate in 2-4 weeks. The third group is IPS (Instant Payments Serbia) - QR code and instant transfer without a card, which is expanding rapidly among domestic buyers. The fourth group is foreign solutions - Stripe (indirectly), PayPal (limited), 2Checkout, Paddle - for international sales. The fifth group is hybrids where the webshop platform (Shopify, WooCommerce) ships with its own integrations. Fees are usually 1.5-3% per transaction on domestic cards, 2.5-3.5% on foreign ones.

How online card payments technically work

Before you choose a solution, it helps to understand how all of this works behind the scenes. When a customer clicks "pay by card" on your site, four participants connect - your site (the merchant), the payment gateway (the technical middleman), the acquiring bank (your bank that receives the money) and the issuing bank (the bank that issued the customer's card). The gateway encrypts the card data, sends an authorization request through the Visa/Mastercard/DinaCard network to the issuing bank, gets an approval or a decline, and returns the response to the site. The whole flow completes in 2-5 seconds.

As a site owner, one technical choice matters most - whether the customer stays on your site and enters card details into your form (integrated checkout), or is redirected to the bank/processor page and then returned (hosted payment page, HPP). HPP is far easier - card data never passes through your server, so you do not need to comply with PCI DSS (which is a serious cost and audit obligation). Integrated checkout looks nicer and does not break the UX flow, but it commits you to PCI compliance or at least SAQ A-EP, which is rarely worth it for small and mid-sized businesses. In practice, 90% of Serbian sites use HPP.

Internet payment gateways from domestic banks

An IPG directly from the bank is the classic route for companies that already have a business account and want everything under one roof. All major banks in Serbia offer an IPG service, with differences in price, support and documentation quality:

• Banca Intesa IPG - one of the oldest and most widely used; stable, good technical documentation, support in Belgrade and Novi Sad; often uses NestPay or an in-house gateway
• UniCredit Bank IPG - technically solid, often paired with an existing POS; Belgrade-based support, standard fees
• Raiffeisen Bank IPG - favorable rates for existing clients of the bank, especially companies that already have a POS and e-banking there
• NLB Komercijalna banka IPG - uses the NestPay platform, standard documentation, Belgrade-based support
• OTP banka IPG - competitive rates, active in digital solutions, a good partner for e-commerce startups
• AIK banka IPG - smaller in volume, but favorable for firms that already have a relationship with the bank
• Erste Bank IPG - stable, with a somewhat stricter application process, good for mid-sized and larger firms

A bank application is the most heavily documented and the slowest - 4 to 8 weeks from first contact to a live service. The bank asks for financial statements, a business description, the site URL with all legal pages (Terms of Use, Privacy Policy, Complaints, Delivery and Returns), and a test transaction before activating production. The upside is full integration with your business account - money arrives directly, no middleman, typically on T+1 or T+2.

The downside is that bank technical documentation is not always developer-friendly - older APIs, 60-page PDF manuals, and support that sometimes does not understand web developers. That is why many firms end up with a payment service provider sitting between the bank and the site. If you are already planning a custom-built site, the IPG decision should be made before development, because it affects the checkout architecture.

Payment service providers that work with Serbia

A PSP (payment service provider) is a company that has an integration with one or more banks and offers you a ready-made technical layer - API, SDK, libraries for all popular frameworks and a hosted payment page. You still need a merchant account at a bank or with the PSP itself, but the technical work is dramatically simpler. Realistic options for the Serbian market:

• CorvusPay - Croatian processor actively operating in Serbia; supports Visa, Mastercard, Maestro, DinaCard, Amex; good English-language documentation, SDKs for PHP, Node, Python, .NET; activation in 2-4 weeks; fees 1.6-2.5% per transaction
• Monri (formerly PayWay) - Sarajevo-based processor with a strong presence in Serbia; similar card coverage to CorvusPay; often chosen for regional e-commerce platforms selling in multiple countries
• AllSecure - domestic processor headquartered in Belgrade; good for firms that want local support in Serbian; supports all domestic cards including DinaCard
• Chip Card - one of the older domestic card processors; stable, broad cooperation with banks; often used in a combined physical and online POS setup
• NestPay - the technical platform behind several bank IPG solutions (NLB, formerly Komercijalna); not a direct PSP for merchants, but integrations are often described through NestPay documentation
• AssecoPay (ex Payten) - regional processor active in Serbia through bank partnerships

In practice, for 70% of mid-sized businesses that want to launch online sales quickly, CorvusPay or Monri are the shortest route. Both have ready integrations for WooCommerce, Shopify (via a custom app), PrestaShop, Magento, and clear documentation for a custom Next.js or React integration. Money typically moves to your bank account on T+1 to T+3, depending on the contract.

IPS payment - QR code and instant transfer without a card

IPS (Instant Payments Serbia) is the national instant payment system that the National Bank of Serbia launched in 2018, and in 2026 it is expanding fast online. The customer on your site gets a QR code or a link, opens their bank's mobile app, scans or clicks, and the transfer completes in a few seconds. The money arrives in your account immediately, 24/7, including weekends and public holidays.

The upsides of IPS for a merchant - lower fees than card payments (often 0.3-0.8% or a flat fee of 10-30 RSD per transaction), instant settlement, and no dependency on the card networks (no Visa/Mastercard interchange). The downside is that it only works for Serbian bank accounts - foreign customers cannot use it. That makes IPS great for domestic B2C businesses (food, delivery, services, small e-shops), while cards remain mandatory for everything else.

Most IPG and PSP solutions in 2026 offer IPS as an additional payment method alongside cards - the customer picks at checkout. If you have a purely domestic customer base, IPS can become the primary payment method because it is substantially cheaper for you and faster for the customer than typing 16 card digits.

Stripe, PayPal and foreign solutions - what actually works

The first and most common question - does Stripe work in Serbia? Directly, no. Stripe does not currently accept merchants registered in Serbia - you cannot open a Stripe account with a Serbian tax ID and receive payments to a Serbian account. Workarounds exist (Stripe Atlas with a Delaware LLC, a company in Estonia via e-Residency, a Wise Business account), but each has costs, tax implications and the risk of account closure if Stripe discovers the real location of operations. For a company that operates from Serbia and primarily invoices Serbian clients, Stripe is not the answer.

PayPal is available in Serbia, but on a limited basis - you can send money, receive money to a PayPal balance, and withdraw it to a foreign-currency card or a Serbian foreign-currency account through partner services. A direct PayPal Checkout integration on the site technically works, but withdrawal and tax documentation are not ideal for a professional e-commerce operation. PayPal is a realistic secondary payment method for foreign customers, not a primary one.

Real foreign options for Serbian merchants that want to sell internationally - 2Checkout (Verifone) accepts merchants from Serbia, offers global card processing and tax compliance for EU sales, at fees of 3.5-5% per transaction. Paddle is a similar solution, especially popular with SaaS, and they invoice on your behalf (merchant of record), which solves VAT headaches. Fastspring is a third option for digital products.

Real fees and costs in 2026

Bank and processor marketing pages love to mention "from 1%" or "competitive rates". Realistically in 2026, for a standard small-to-mid-sized Serbian firm, expect the following rough fees:

• Domestic cards (Visa, Mastercard, DinaCard) via a bank IPG - 1.3% to 2.2% per transaction + a flat fee of 10-30 RSD
• Domestic cards via a PSP (CorvusPay, Monri) - 1.6% to 2.5% per transaction + a flat fee of 0.1-0.3 EUR
• Foreign cards - 2.5% to 3.5% per transaction + a flat fee; some PSPs add a 1-2% currency conversion fee
• IPS instant payment - 0.3% to 0.8% or a flat fee of 10-30 RSD
• PayPal - 3.4% to 4.4% per transaction + a flat fee in the currency; currency conversion is added if you withdraw in another currency
• 2Checkout / Verifone - 3.5% to 5% per transaction + a flat fee of 0.3-0.5 EUR
• Setup fee - from 0 to 200 EUR; many banks and PSPs waive it during promo periods
• Monthly subscription - from 0 to 30 EUR; some banks include it in the business account package
• Minimum monthly fee - some PSPs require a minimum monthly volume; check this for seasonal businesses

The complete math for a small firm processing 300-500 transactions per month at an average value of 2,000-5,000 RSD - realistically your processing costs will fall between 15,000 and 60,000 RSD per month, depending on card mix (domestic vs. foreign) and the chosen processor. For a precise projection before picking a provider, see how processing fees fit with other costs in our guide on website development cost.

Documentation and activation timeline

Regardless of provider, an application for online card processing asks for a similar document package. Having all of this ready up front makes activation faster:

• APR extract (not older than 30 days) - to verify company status
• Tax ID (PIB) and company number - for identification and tax obligations
• ID card of the authorized person - for the KYC process
• Financial statements (balance sheet and P&L) - for the bank/processor risk assessment
• Business and product description - what you sell, average transaction, expected monthly volume
• Site URL with all legal pages - Terms of Use, Privacy Policy, Complaints and Returns, Delivery and Fulfillment
• Company bank account - usually at the same bank (for a bank IPG) or any business account (for a PSP)
• Proof of ownership of the domain or content you sell - for risky categories (digital goods, services)

Activation timelines, realistically observed with clients in Novi Sad and Belgrade:

• IPS QR payment - 1 to 2 weeks (fastest, because it is domestic and simple)
• CorvusPay / Monri - 2 to 4 weeks from the moment documentation is complete
• AllSecure / Chip Card - 2 to 4 weeks for domestic processing
• Bank IPG (Intesa, UniCredit, NLB) - 4 to 8 weeks, especially without prior history with the bank
• 2Checkout / Verifone - 1 to 3 weeks after KYC verification
• PayPal Business - can be opened in 1-3 days, but verification for larger amounts takes longer

Practical tip - applying with two processors in parallel is not a bad idea if you have a launch deadline. If one declines or slows down, the other is a backup. There is no cost for the application process itself, only for activation and the monthly subscription you keep only for the active solution.

Technical things you must know - 3D Secure, DinaCard, hosted page

A few technical items that are often overlooked in prep and then cause real problems:

• 3D Secure 2.0 - mandatory in Serbia the same way it is in the EU; every modern IPG and PSP supports it; old integrations without 3DS 2.0 no longer pass bank checks
• DinaCard - the national card scheme from the NBS; many Serbian customers hold only DinaCard and cannot pay if you do not support it; all domestic IPGs and PSPs include it by default
• SCA (Strong Customer Authentication) - closely tied to 3DS 2.0; the customer must confirm the payment through a bank app or SMS
• PCI DSS - if you use a hosted payment page (HPP), your obligations are minimal (SAQ A); if you implement direct checkout, you need SAQ A-EP and an annual audit
• Tokenization - for saved cards (one-click payments); requires additional configuration with the processor and has security implications
• Webhook integration - mandatory for e-commerce; the processor sends a notification on a successful/failed payment, and your site must process it and update the order
• Idempotency - protection against duplicate charges; your integration must correctly handle a retry with the same ID
• Refund and reversal - every processor offers a refund API; check refund windows (some only work 90-180 days after the transaction)

If your site is older or built by someone who has not worked with card processors, seriously consider a custom integration with the processor and webhook handling. For more complex e-commerce or subscription businesses this grows into a real web application with its own billing and invoicing system, not just a marketing site with a checkout form.

Common mistakes when picking a processor

After dozens of integrations we have done or tracked over the years, the same mistakes keep returning:

• Focusing only on the fee - a 0.2% difference between two processors is irrelevant if one is activated twice as fast or has better technical support
• Ignoring foreign cards - if you sell or plan to sell to clients in the region and the EU, check non-domestic card fees up front
• Forgotten IPS - for domestic B2C businesses, IPS can drastically lower processing costs; always offer it as a payment method
• Missing legal pages - the bank or processor will not activate the IPG until you have Terms of Use, Privacy Policy, Complaints and Delivery & Returns; this can add 2-3 weeks of delay
• Wrong business description in the application - if actual sales differ from what you declared, the processor can block the account retroactively
• No staging environment for testing - an integration that runs in production with real cards without a test mode leads to expensive mistakes; every serious processor has a sandbox
• Ignoring chargebacks - with a chargeback rate above 1% the processor can raise fees or close the account; monitor and react quickly
• Hard-coded merchant key - API keys in frontend code are a disaster; every secret must be server-side, in environment variables
• Dependency on a single processor - for a serious e-commerce it is good practice to have a backup processor ready, especially before the holiday season

Be especially careful if someone offers you a "turnkey payment solution for your site" without naming the processor or bank. In Serbia there is no gray area in payment processing - every serious provider is either a licensed bank or an accredited processor with a publicly verifiable bank partnership.

The local angle - what firms in Novi Sad and Belgrade actually use

As a Novi Sad agency working with clients in Novi Sad, Belgrade and the wider region, we see what is actually being used on the ground. Small online shops and service businesses (hairdressers, dental offices with paid online consultations, courses, food delivery) most often pick CorvusPay or Monri plus IPS QR as a secondary option - fast activation, clear fees, good support. Mid-sized firms (up to 1 million EUR annual revenue) more often go with a bank IPG at Intesa, UniCredit or Raiffeisen, especially if they already have a business relationship. Large firms and marketplace platforms combine multiple processors - a PSP for primary processing, a bank IPG as a backup, and a foreign solution for international clients.

In 2026 the Novi Sad IT and services sector is especially active around IPS payments - many firms report that 20-40% of transactions already migrate to IPS when offered as an option, thanks to its speed and familiarity (users already use IPS in supermarkets and restaurants). If you are building a new webshop or comparing e-commerce platforms, include IPS in the payment architecture from day one.

Conclusion

Online card payments in Serbia in 2026 are a solved problem - there are more than five realistic options, from bank IPGs at major domestic banks, through regional processors like CorvusPay and Monri, to IPS QR instant payments that are expanding fast. Fees are reasonable (1.5-3% for domestic cards), activation takes 2-8 weeks depending on the route, and technical integration is a solvable problem on every modern web stack. The bigger challenge than the choice itself is usually preparing the site - legal pages, SEF integration, 3D Secure, hosted vs. integrated checkout, and a backup processor for seasonal spikes. Get that right and card payments become the quiet part of the business that just works.

If you are thinking about launching online sales or integrating card payments on an existing site, take a look at our packages and pricing or get in touch via our contact page - we build CorvusPay, Monri, AllSecure, IPS and bank IPG integrations for clients in Novi Sad, Belgrade and the wider region.