Transact 2026.9.17 — Credit-Card Controls, Clearer Declines, and PSP Refinements
· 2 min read
**Building on Transact 2026.9, this release hardens credit-card blocking, makes card rejections and failed payments easier to understand for agents, and lands a batch of PSP integration refinements across Stripe, Trust, Worldpay, and Adyen. **
Most of this release is about correctness and clarity: card-type restrictions that hold up once a card is entered, error messages that explain why a card was refused, and provider integrations that behave predictably.
Highlights
- Reliable credit-card blocking — blockCreditCards / restrictCredit now holds after a card is captured, composes with card-type overrides, and can't be bypassed by an unknown BIN.
- Clearer card rejections — the refusal message now names the entered funding type, e.g. "Visa (Credit) not accepted. Please use Visa (Debit)."
- Dynamic Pay by link menu — the "Pay by link" option now lists only the delivery channels enabled in config (Webchat, QR Code, SMS, Email).
- PSP work — a Stripe tokenisation-only flow, Trust AUTH/settlement improvements, a Worldpay scheme-identifier fix, and an Adyen Key Vault naming fix.
Agent and Customer UI
The agent experience gains clearer messaging and a config-driven capture menu.
- Card-type rejection messages now include the entered card's funding type.
- Pay by link menu description is now dynamic.
Payments and PSP Integrations
A round of provider integration improvements and correctness fixes.
- Stripe: added a createPaymentMethod-only flow for tokenising a card without taking a payment. Card declines are now logged at Information rather than Error, so genuine failures stand out in diagnostics.
- Trust: the AUTH request is now wrapped in the Trust JSON envelope, and the integration parameterises the auth method and supports caller-driven settlement
- Worldpay: the request factory now sanitises and supports both scheme transaction identifier keys, fixing scheme-reference handling.
For the full set of endpoints, see the Transact API reference.