Click to Pay: Passwordless Checkout Coming to Your Cards

What Is Click to Pay?

Click to Pay represents the card networks’ answer to digital wallets like Apple Pay and Google Pay. Launched jointly by Visa, Mastercard, American Express, and Discover, this passwordless checkout system stores payment credentials behind a single set of login credentials. Users authenticate once per device, then breeze through online checkouts without entering card numbers or shipping addresses repeatedly.

The technology builds on EMVCo standards-the same organization that brought chip cards to market. Instead of saving cards in individual merchant accounts, consumers maintain one profile across all participating retailers. When checking out, shoppers click the Click to Pay button, verify their identity through biometrics or a one-time code, and complete the purchase.

Adoption has grown steadily since 2019. Mastercard reported 120 million cards enrolled globally by mid-2023, with merchants processing over $1 billion in transactions. Visa’s use, branded as “Visa Click to Pay,” claims 30% faster checkout times compared to manual card entry.

How Passwordless Authentication Works

Traditional online payments require typing 16-digit card numbers, expiration dates, CVV codes, and billing addresses. Each field introduces friction-and potential for abandonment. Research from Baymard Institute shows the average cart abandonment rate sits at 70. 19%, with complicated checkout processes cited as a primary factor.

Click to Pay eliminates most of these fields. Here’s the technical flow:

1. Enrollment: Cardholders create a profile through their bank’s app or during checkout at participating merchants. They link eligible cards and set authentication preferences.

2. Recognition: When returning to any Click to Pay merchant, the system recognizes the user’s device through browser cookies and device fingerprinting.

3. Authentication: Users verify identity through device biometrics (Face ID, fingerprint), one-time SMS codes, or email links. No passwords involved.

4. Transaction: The network retrieves stored card details and pre-fills checkout forms. One click authorizes payment.

The security model leverages tokenization. Actual card numbers never reach merchant servers-instead, single-use tokens represent each transaction. If a retailer suffers a data breach, stolen tokens prove useless for subsequent fraud.

Network Implementations and Differences

While the four major networks collaborate on core standards, each maintains branded variations:

Visa Click to Pay integrates with Visa Checkout’s existing infrastructure. Over 6,000 merchants accept it, including Target, Best Buy, and Newegg. Visa emphasizes guest checkout capabilities-users don’t need accounts with individual retailers.

Mastercard’s version focuses on SRC (Secure Remote Commerce) specifications. The company partnered with NatWest and Lloyds Banking Group in the UK for early rollouts. Mastercard claims checkout completion rates improved 15-20% at pilot merchants.

American Express brought its SafeKey authentication into the Click to Pay umbrella. Amex cardholders access the feature through Amex’s existing digital wallet infrastructure.

Discover joined later but maintains full compatibility. Smaller merchant adoption remains a challenge, though Discover cards work smoothly where Click to Pay exists.

The networks maintain a shared logo and user experience guidelines, preventing the fragmentation that plagued earlier wallet attempts.

Merchant Integration Requirements

Retailers face technical lift to enable Click to Pay. Integration varies by payment processor:

Stripe: Offers pre-built components requiring minimal code changes. Merchants add a JavaScript library and configure payment methods in their dashboard. Stripe handles SRC communication and token exchange.

Adyen: Provides web and mobile SDKs supporting Click to Pay alongside other payment methods. use typically takes developers 2-4 weeks depending on platform complexity.

Worldpay: Built Click to Pay into its hosted payment pages and API solutions. Merchants using Worldpay’s integrated checkout can enable the feature through configuration changes.

Security standards require PCI DSS compliance, though Click to Pay’s tokenization reduces scope. Merchants never handle raw card data, shifting liability to networks and issuing banks.

Costs mirror standard card acceptance fees. Networks don’t charge additional gateway fees for Click to Pay transactions-the same interchange rates apply whether customers manually enter cards or use passwordless checkout.

Consumer Adoption Challenges

Despite technical advantages, Click to Pay faces awareness problems. Surveys show less than 25% of US consumers recognize the name or logo. Compare that with Apple Pay’s 85% brand recognition among iPhone users.

Enrollment friction presents another barrier. Unlike Apple Pay, which auto-enrolls cards added to Wallet, Click to Pay requires explicit setup. Banks could pre-enroll customers but most haven’t implemented proactive campaigns.

Device limitations complicate matters. The system works smoothly on desktop browsers and mobile web, but native app integration lags. Retailers with custom iOS or Android apps must use SDKs separately-many haven’t prioritized this development.

Competition from established wallets creates market confusion. Shoppers already using PayPal or Apple Pay see little reason to switch. Click to Pay excels at merchant websites where those alternatives aren’t available, but that’s increasingly rare territory.

Security Advantages Over Traditional Checkout

Passwordless authentication directly addresses credential stuffing and phishing attacks. Traditional checkouts require accounts with passwords-each representing a potential breach vector. LastPass reported the average person manages 168 passwords across personal and work accounts. Reuse runs rampant.

Click to Pay eliminates stored passwords at merchant sites. Even if attackers compromise a retailer’s database, they gain no reusable credentials. Authentication happens through possession factors (device) and biometrics, which don’t travel over networks.

Tokenization provides transaction-specific security. Each purchase generates unique tokens valid for single use. Contrast this with saved card numbers in merchant vaults-one breach exposes data for unlimited fraud.

The networks also implemented behavior analytics. Systems flag unusual patterns like purchases from new locations or high-value transactions, triggering step-up authentication. Users might face additional verification without exposing underlying payment methods.

Impact on Cart Abandonment Rates

Checkout friction directly correlates with abandoned purchases. Baymard’s research identifies these top abandonment reasons:

• Extra costs too high (48%)
• Required account creation (24%)
• Complicated checkout (17%)
• Couldn’t trust site with card information (18%)

Click to Pay addresses three of these four factors. Guest checkout eliminates forced registration - fewer form fields reduce complexity. Tokenization provides security reassurance through recognizable network brands.

Merchants implementing the technology report measurable improvements. Luxury retailer Net-a-Porter saw 20% higher conversion among Click to Pay users versus manual entry. UK grocer Ocado reduced checkout time by 35 seconds on average-significant in high-frequency purchase categories.

Mobile commerce shows the most dramatic gains. Typing card details on smartphone keyboards frustrates users more than desktop experiences. Click to Pay’s one-tap approval cuts mobile checkout from 90+ seconds to under 20.

Future of Passwordless Payments

Click to Pay represents one thread in broader authentication evolution. Biometric payments continue expanding-Mastercard trials palm recognition at checkout, while Visa tests face-based payments in Brazil.

Open banking initiatives could integrate Click to Pay with account-to-account transfers. Instead of card networks processing transactions, merchants might pull directly from checking accounts using the same passwordless interface. This threatens card economics but appeals to merchants seeking lower processing fees.

Cryptocurrency wallets adopt similar patterns. MetaMask and Coinbase Wallet use biometric unlocking and one-click transaction approval. As digital currency adoption grows, users expect consistent experiences across payment types.

The technology’s success depends on network effects. Each additional merchant increases consumer incentive to enroll. Each new cardholder makes merchant integration more valuable. The networks cleared the technical hurdles-now marketing and partnerships determine whether Click to Pay achieves mainstream traction or becomes another wallet also-ran.