What really happens when you click "Pay" on a website

If you carefully read a website's terms of service, you'll notice that the shortest part is almost always the one dedicated to payments. It's no coincidence: sellers have no desire to explain what happens between the moment you click the button and when the money leaves your account. Yet, this is where the real game is played, much more than on the product page.

New European regulations, progressively implemented in recent years, have significantly raised the bar. Today, any online payment above a certain threshold must go through strong customer authentication, meaning at least two different factors. The practical consequence is that the classic 'copy-paste' card theft is much less effective than before, and fraudsters have shifted towards social engineering.

One detail that almost no one mentions is that online euro payments between European parties are now almost all instant, and the cost for the bank is close to zero. When someone charges you a small extra fee because 'instant payment costs,' they're telling you something that hasn't been true for years. It's not dramatic, but it's a good indicator of who you're dealing with.

The right of withdrawal, for online purchases, is a powerful but not universal protection. It applies to purchases from professionals, with fourteen days to change your mind. Unless otherwise stated, it does not apply to purchases between private individuals: what you buy from another user is not protected by the same right, and this is one of the first things we should teach those entering the secondary market.

The first thing I look at when paying online is the method the seller asks me to use. If someone insists on an immediate bank transfer to a personal account, or worse, a postal top-up, ten times out of ten, something is off. It's no longer even a matter of trust: it's that those tools, by their very nature, do not provide a real mechanism for reconsideration. Once the money is gone, you're chasing it.

If a site asks you to save your card 'for convenience,' think twice. It's not necessarily a bad idea, but it means you're delegating that responsibility to the party in front of you. When in doubt, I always prefer to enter the data manually each time: I lose ten seconds and avoid the worry of understanding how and where it will be stored.

What really matters in this market isn't a single lucky deal. What matters are the rules you set for yourself, which remain valid even when you're in a hurry, even when you're excited to have found the right listing. Discipline, for once, trumps opportunity.