Yes: the link opens the payment provider secure page rather than the merchant site. Card details are entered in the same place as when paying in an online store, and the merchant never sees them — only the operation status.
What makes a link safe
- The checkout page opens on the provider domain with a valid certificate.
- Card data never passes through the merchant server and is not stored there.
- The operation is confirmed by 3-D Secure just like an ordinary payment on a site.
What a buyer should check
- The page address: the domain must belong to the payment service, not merely resemble it.
- The amount and purpose: both are visible before confirmation and must match what was agreed.
- The connection lock in the address bar — a checkout page without it is not worth using.
What a merchant should remember
- Send the link through a channel where the buyer expects a message from you.
- Never ask for card details in reply — no payment service ever does that.
- Set an expiry if the payment is expected soon.
How to spot a fake checkout page is covered separately.
