Transmitting user consent

BNP Paribas requires user consent to accept payment initiation from a PISP.

For BNP Paribas, transfer requests can be made using the Bank-initiated payment flow. for banks supporting immediate transfer token redemption. Under the Bank-initiated flow, the E-merchant automatically receives a transferId and transfer status after making the transfer request.

Alternatively, the E-merchant is required to explicitly confirm customer consent by redeeming the transfer token with a POST /transfers call. This is referred to as a E-merchant-initated (2-step) flow. For 2-step payments, the E-merchant receives a tokenId in response to the transfer request.

Bank-initiated Payments

The basic flow looks like this (click to enlarge):

E-merchant-initiated Payments (2-step)

The basic flow looks like this (click to enlarge):

Guidance on how to structure and when to make the corresponding API calls is discussed in:

• Single Immediate Payment