Safety and continuity: how your payments stay secure and keep running
A payment solution through LunaPay is secure and keeps running. Secure, because every transaction runs through regulated, licensed European partners, over certified infrastructure that meets the current PCI DSS standard, with 3-D Secure and strong customer authentication under the European payment rules. And it keeps running, because multiple acquirers stand ready behind the scenes: if one drops out or declines, another takes over instantly. On this page we explain how that works, in plain language.
The two questions every high-risk business asks
Anyone running a high-risk business has often already faced a refusal or a termination. Two questions then really matter. Is it safe, for me and for my customers? And does it keep working, even when something goes wrong somewhere? The answer to both is yes, and below you read why that is not a promise but a setup.
Regulated, licensed European partners
Every payment that runs through LunaPay is processed by licensed European acquiring and banking partners. These are regulated parties under supervision that meet the European requirements for payment services. High-risk with us therefore does not mean outside the rules; it means within the rules, with partners that accept your sector. Business accounts and a European IBAN are facilitated through those same licensed partners.
Your card data in safe hands: PCI DSS
PCI DSS is the global security standard for anyone who handles card data, drawn up by the card industry itself. The transactions that run through our partners are processed on infrastructure that meets the current version of that standard. That standard has been tightened considerably in recent years: where compliance used to be mainly an annual check, the current version calls for continuous security, all year round. And there is a further reassurance for you as a business: if you check out online through our hosted checkout, card data does not even touch your own systems. The sensitive side of the payment stays in the secure, certified environment.
Strong customer authentication: 3-D Secure and SCA
Online payments in Europe fall under PSD2, the European directive for payment services. It requires strong customer authentication (SCA): your customer confirms a payment with an extra step, for example in the bank app. 3-D Secure is the technology that does this for card payments. The result is less fraud and fewer chargebacks, which is extra valuable in high-risk sectors. Europe is tightening these rules further too: the successor to PSD2, the PSD3 and PSR package, was finalised in 2026 and will push even harder on fraud prevention and consumer protection in the coming years. Our partners move with it, so your payments keep meeting the applicable requirements without you having to track the rulebook.
Careful onboarding: AML and KYC protect you too
At the start we request documents and verify your business. That is called KYC (know your customer), and together with the anti-money-laundering checks (AML) it belongs to any serious payment solution. We understand it is a bit of work, and we keep the checklist as clear as possible. But above all, see it as protection: a careful onboarding is exactly what keeps your acceptance stable afterwards. Payment solutions that ask nothing tend to be the ones that vanish again just as easily.
Continuity: multiple acquirers as backup
Safety is about whether things are in order. Continuity is about whether they keep working. That is what our multi-acquiring setup is for: every transaction can run across multiple licensed acquirers, and if one declines or stalls, another takes over instantly. You notice nothing, your customer just pays. How exactly that works, you read on the multi-acquiring page.
What this means for you
You do not have to be a compliance expert to accept payments safely. That is our job. You supply your documents at the start, we arrange the rest: licensed partners, certified infrastructure, strong customer authentication and a backup that is switched on. So you can get on with your business, knowing your payments are properly arranged.
Frequently asked questions
Is a high-risk payment solution secure?
Yes. Transactions run through regulated, licensed European partners over certified infrastructure, with PCI DSS and 3-D Secure.
Is a high-risk payment solution legal?
Yes. We work within the European rules for payment services, with partners under supervision.
Who holds the licence?
The licensed European acquiring and banking partners we work with. They process the transactions and are under supervision; we arrange and guide your solution.
What is PCI DSS?
The global security standard for handling card data. The current version calls for continuous security rather than an annual check.
What are 3-D Secure and SCA?
Strong customer authentication under the European payment rules: your customer confirms an online payment with an extra step. That reduces fraud and chargebacks.
What changes with PSD3?
The European PSD3 and PSR package, finalised in 2026, tightens fraud prevention and consumer protection further in the coming years. Our partners move with it.
What happens if an acquirer goes down?
Another acquirer takes over the transaction instantly. That is the core of multi-acquiring.
Why do I have to supply documents?
Because of the required KYC and AML checks. A careful onboarding is what keeps your acceptance stable afterwards.
Payments that are both safe and stable.
Request your personal proposal and find out what we can arrange for safe and stable payments.