Published 8 September 2026 · 6 min
Accepting card payments in Kazakhstan: what a store owner should know
3-D Secure, what the bank expects to see on your website, and why acquiring is switched on only after your pages pass review. Practical notes from wiring up internet acquiring.
A Kazakh buyer who reaches your checkout expects the familiar: confirmation by SMS or in the banking app through 3-D Secure, and the ability to pay with any bank's card — Visa, Mastercard or UnionPay. A store where payment feels unfamiliar loses sales it had almost won.
The bank reviews your website first
Before opening internet acquiring, the bank or payment provider checks the site: company name and BIN, legal address, contacts, the public offer, refund terms, a privacy policy under the personal data protection law, and delivery or handover terms. Missing pages are the most common reason an application stalls, so we prepare them before applying, not after a rejection.
3-D Secure is not optional
Almost every card goes through a confirmation step. The gateway runs it, but your checkout has to bring the buyer back with a clear result — success or failure. A hosted payment page, where the card is entered on the bank's own page, also keeps card data off your server entirely, which sharply reduces your security obligations.
What we set up for a store
- A hosted payment page through the bank or provider — Halyk ePay, Freedom Pay, PayBox, under your own acquiring agreement
- A WooCommerce integration where the order is settled only after a server-to-server check with the bank, not on the browser redirect alone
- Refunds from the shop admin panel without touching code
- Test mode first: the gateway goes live only after a real test payment and a refund are both visible in the bank's panel
One question to settle with the bank before promising prices: the settlement currency and the commission. Kazakh acquiring settles in tenge, so prices on the site must be in tenge as well — that is a contract requirement, not a technical one.