Payments.lk

Questions

Every question, answered.

40 answers, none of them evasive. If yours is not here, write to us and it will be by next week. The numbers on this page come from the same rate card that prices your account, so they cannot go stale on their own.

Pricing

Is the headline rate really the whole cost?
For an ordinary local card, yes. There is no setup fee, no monthly fee and no minimum volume on top of it. Two things are added only when they apply: cards issued outside Sri Lanka cost 1.0% more, and premium issuer cards cost 0.5% more. Both are costs the card networks charge us and we pass them through rather than hiding them in the headline.
Why is the rate cheaper when I am smaller?
Because starting is the hard part. In the beginning things are hard and you cannot yet make money, so we subsidise your start: 2.29% on cards under Rs. 100,000 a month, with no monthly fee and no setup fee. Where everyone else charges you up front, we take a different view; we are a payments and digital enablement partner whose only focus is helping you grow, and we earn when you do. Above Rs. 100,000 the standard 2.49% still beats every published plan in the market, and past Rs. 3,000,000 a specialist prices you directly.
What exactly do I pay on a Rs. 10,000 sale?
On a local Visa or Mastercard, Rs. 229 if you are under Rs. 100,000 a month and Rs. 249 above it. Nothing else: no fixed fee per sale, no gateway fee, no monthly charge. If the card was issued abroad add Rs. 100, and if it is a premium issuer card add Rs. 50.
How do you decide which tier I am on?
By the card volume you processed in the calendar month. The tier is applied to the whole month's volume, so crossing Rs. 100,000 on the 20th means that month is priced at 2.49%, and a quieter month drops you back to 2.29% automatically. You never have to ask.
Is there a minimum monthly volume or a minimum charge?
No. In a month with no sales you pay Rs. 0. There is no minimum, no dormancy fee and no charge for keeping an account open.
Are you really cheaper than the other gateways?
On every published plan in the market, at every volume up to Rs. 3,000,000 a month, in the first year and in steady state. We checked each published price at every Rs. 10,000 step of monthly volume and six average order values, counting setup and monthly fees, and read anything ambiguous in the other provider's favour. The calculator on the pricing page shows your own number against each kind of plan, and the sources and method section under it names every provider and plan we checked, with the date.
What happens above Rs. 3,000,000 a month?
You speak to a payments specialist and get a written quote. We stop publishing at that line because above it card mix, chargeback profile and settlement terms move the rate more than volume does, and because we would rather quote you properly than publish a number that a competitor's high-volume plan could undercut.
Do you charge for refunds, chargebacks or failed payments?
Failed and declined payments cost nothing. Refunds can be issued in full or in part from the dashboard or the API. Chargeback handling and any network-imposed dispute fees are set out in your approval letter before you go live, so nothing appears on a statement that you have not seen in writing first.

Applying and approval

I have not registered a company. Can I still apply?
Yes, if you are a licensed professional trading in your own name: a doctor, lawyer, accountant, consultant and the like. Apply with your NIC and your professional registration and we assess you as you are. If you are building a business that will need registering, say so; we walk you through registration and a business bank account as part of onboarding.
How long does approval take?
Usually a few working days once your application is complete. Incomplete applications are the main thing that slows this down, which is why the form saves as you go.
What does the application actually involve?
One question per screen. Everything you can answer by tapping comes first (what you sell, where you are, how you get paid), and typing comes last (your name, ID number, business name, address). About half the application is done before you need a keyboard. It saves automatically, and you can leave and come back.
Do I need an account before I can see the dashboard?
No. Open the dashboard and start setup straight away. We only ask for an email and password partway through, when you want to save what you have entered to an account you can return to.
Which documents do I need?
It depends on what you are. Everyone: both sides of your NIC, proof of the bank account we settle to (a statement from the last three months, a passbook copy, or a bank confirmation letter on letterhead with the branch manager’s signature and stamp) and your TIN certificate, or a declaration if you have not registered for one yet. Unregistered individuals add a proof of address dated within six months. Sole proprietors add the Business Registration certificate. Partnerships add every partner’s NIC, the registration, the partnership deed and, where partners sign jointly, an authority naming the person who signs. Companies add the Certificate of Incorporation, every director’s NIC, Form 1, the latest Form 15 and Form 20 where applicable, the Articles of Association, a certified board resolution and the shareholders and beneficial owners. Licensed activities (tourism, pharmacy, medical, gems and jewellery, fuel) add the regulator’s licence. The application only asks for what applies to you, and a clear phone photo is fine.
Can I apply as an individual or sole proprietor?
Yes. Sole proprietorships, partnerships and private or public limited companies can all apply, and if you are not sure which you should be, choose that option and we will advise you.
What kinds of business can you not accept?
Anything unlawful in Sri Lanka, and the categories the card networks prohibit outright. Higher-risk categories that are legal are priced separately and confirmed in writing before go-live rather than refused. If you are unsure, apply anyway and say what you sell plainly; vague answers are the most common reason an application stalls.
How much can I take in a month?
Every account starts on the Starter plan: card payments at 2.29% up to Rs. 100,000 a month. When you need more, request the Growth plan from the Plans page in the dashboard: 2.49% up to Rs. 3,000,000 a month, usually approved within a working day. Enterprise has no monthly limit, at a rate agreed with you. The dashboard shows how much of the month you have used, and we email you at 60, 70, 80 and 90 percent.

Taking payments

Which cards can my customers use?
Visa, Mastercard, American Express, UnionPay, JCB and Alipay+. Cards issued outside Sri Lanka are accepted, priced in rupees, with the cross-border surcharge on top of your tier rate.
Can I take LankaQR, LankaPay or UPI?
Yes. LankaQR and LankaPay for local QR and account-to-account payments, and UPI for customers paying from India, all on the same account and the same dashboard as your card payments. LankaQR and LankaPay cost 0.99% of the payment, plus Rs. 10 on payments under Rs. 2,500; above that, 0.99% alone. UPI is priced with your account, so ask when you apply.
Which currency do you settle in?
Sri Lankan rupees. A customer paying with a foreign card is charged in rupees and their bank converts.
I do not have a website. Can I still take card payments?
Yes. Payment links let you take a card payment by sending a link over WhatsApp, email or SMS, with nothing to build. Card machines take payments across a counter on the same account at the same rate.
Can I take card payments in person?
Yes. The Flagship terminal is wireless, prints receipts and scans barcodes, and arrives configured and paired to the till. It takes every card at the same rate as your online payments, and everything it takes shows up on the same dashboard. Pricing is quoted with your account when you request one.
Do you have SDKs or plugins?
There are SDKs for Node.js and PHP, a pay button you add to any web page with one script tag, and SDKs for React Native, iOS, Android and Flutter apps, all opening the same hosted checkout. You install them the usual way, from npm, Packagist, Swift Package Manager, CocoaPods, Maven Central or pub.dev, and each has a public repository on GitHub. There are plugins for WooCommerce, PrestaShop (1.7.8 to 9) and OpenCart 4 you can download and install today from https://payments.lk/developers/woocommerce, https://payments.lk/developers/prestashop and https://payments.lk/developers/opencart; they are built and their tests pass, but they are not on the WordPress plugin directory, PrestaShop Addons or the OpenCart Marketplace yet, so there is no automatic update. There is no Shopify app. Runnable samples in Node.js and PHP are at https://payments.lk/developers/samples. Sandbox keys are issued the day you apply so you can integrate while underwriting runs.
Is 3D Secure included?
Yes, on every online transaction, at no extra charge.

Payouts, limits and disputes

Where does my money go?
To the Sri Lankan bank account you nominate during setup. We settle through Bank of Ceylon, People's Bank, Commercial Bank, Hatton National Bank, Sampath Bank, Nations Trust Bank, Union Bank and Pan Asia Bank, and your account can be at any bank in the country.
How do I know what I have been paid?
Every payout in the dashboard lists the payments inside it, the fee on each and the net amount, and can be exported. Reconciling payouts to your books is the thing most founders get wrong in year one, which is also why Surge Cloud is offered from the same account.
What happens when I reach my monthly limit?
Each plan's limit is the ceiling of its pricing bracket: Rs. 100,000 a month on Starter, Rs. 3,000,000 on Growth. A payment that would take the month past the limit is refused whole, and your customer is told only that card payments are not available right now. Refunds do not free up room. The limit resets at midnight on the 1st, or at once when an upgrade is approved, so request one before you get close.
What happens if a customer disputes a payment?
You are notified in the dashboard and by email, with the deadline and what evidence helps. You respond from the disputes page. Payable's team handles the exchange with the card network.

Security and your data

What happens to the ID and bank details I enter?
They are encrypted before they are stored and are only read by the team underwriting your application. We do not sell or share them for marketing.
How are documents stored?
Encrypted at rest with AES-256-GCM, in the same way as your ID and bank account numbers. They are decrypted only when an underwriter opens your file, and never sent back to a browser after submission.
Does my customer's card data touch my website?
No. Card details are entered on our hosted checkout or through our SDK, so they never pass through your servers. That keeps you out of most of the PCI DSS scope.
Who is actually processing my payments?
Payable. Payments.lk is Payable's startup brand, and every card clears on Payable's licensed acquiring rails with its partner banks. You are not being introduced to a third party.

Developers and AI agents

Can an AI agent read your pricing and terms?
Yes, and it is built to. Every page carries structured data, the fact sheet at /facts states every number in plain sentences, /llms.txt is a short machine-readable summary and /llms-full.txt is the whole fact sheet and this FAQ in one document. If you ask Claude or ChatGPT for the cheapest payment gateway in Sri Lanka, everything it needs to answer correctly is published.
Can I run my account through Claude?
Yes. From the AI agents page in your dashboard you issue an agent key, named for the agent and carrying only the scopes you tick, and point Claude Code, Cursor, VS Code, Codex or the Claude API at https://api.payments.lk/mcp with it. The agent can then list and explain payments and refunds, summarise a day, create payment links and prepare refunds. A refund it prepares waits on that page for you to approve, and nothing moves until you do. The key is built to be survivable if it leaks: it ends on a date you choose, works in one mode, opens that server and nothing else on our API, is rate limited, and revoking it stops the agent at once and also stops anything it has already asked you to approve. Your customers' names and contact details reach the agent masked unless you tick customer details. Every call is in your audit trail. Signing in from Claude.ai and ChatGPT is next; payouts and disputes follow when those feeds are connected.
Which languages does the API support?
It is a plain REST API over HTTPS with JSON, so anything that can make an HTTP request can use it. There are libraries for Node.js and PHP on servers and for React Native, iOS, Android and Flutter in apps, the developers page shows a first call in curl, and every error links to a page that says what it means and how to fix it.
When do I get API keys?
Sandbox keys the day you apply, from the developers page in your dashboard. Live keys you create yourself on the same page once your account is approved and activated; nothing is sent to you, and each key is shown once, when you create it.
Do you have webhooks?
Yes. Register an endpoint in the dashboard and we send signed events such as payment.succeeded, payment.failed and refund.succeeded, with retries if your endpoint is down.
Where do I report a security issue?
Email [email protected] with the details and we will respond directly. Please do not test against live merchant accounts.

Beyond payments

What is Surge Cloud and why do you keep mentioning it?
Stock, invoicing, VAT and tax reporting, payroll and a full ERP, from the same group, available from your payments dashboard. Payments are rarely the thing that breaks first in a growing business; reconciliation and stock are. It is a separate product and saying no to it has no effect on your payments approval.
What does Surge Cloud cost?
US$50 a month including five users, then US$2 per user. For a ten-person team that is US$60 a month, against about US$90 at Odoo, US$370 at Zoho One and about US$1,989 at NetSuite for the same size, at each vendor's own published price. The upgrade page in the dashboard lets you drag your team size and see the year's difference.
What is a migration grant?
Part of the cost of moving your existing data across and training your team, covered by us, assessed case by case. It is an expression of interest rather than an approval, and asking costs nothing.
Every question, answered · Payments.lk