AllSecure, IPS QR, COD: which payment method to choose
Vondi supports three payment methods: card via AllSecure, IPS QR (NBS NBS Pay), and cash on delivery (COD). Each has its strengths and weaknesses. This article walks through them in plain terms — no marketing fluff.
Overview at a glance
| Method | Speed | Buyer fee | Security | Best for |
|---|---|---|---|---|
| Card (AllSecure) | Instant | 0 RSD | 3-D Secure, PCI DSS L1 | Most purchases |
| IPS QR | Instant | 0 RSD | NBS standard, in-app auth | Quick mobile buys |
| COD | At delivery | 0-200 RSD (courier) | Pay only when you see the parcel | First-time buys, unfamiliar seller |
Card (AllSecure)
How it works
At checkout the buyer enters card number, expiry date and CVV. Vondi forwards the data to the AllSecure processor (PCI DSS Level 1 certified). AllSecure redirects the buyer to a 3-D Secure check at their bank — the buyer confirms with a code, biometrics or push notification. If everything checks out, the transaction is approved and the seller receives the money.
Important: Vondi does not store card number, CVV or expiry. All of that stays with the certified processor. Vondi only stores a *token* — an anonymous identifier that lets buyers re-purchase without re-entering the card.
Banks supported by AllSecure
AllSecure accepts cards from all major Serbian banks: Banca Intesa, NLB Komercijalna banka, OTP, Raiffeisen, ProCredit, AIK, ALTA Bank, and others. Foreign cards (Visa, Mastercard) work without issues.
DinaCard works too, with one specific limit: DinaCard maximum per transaction is 200,000 RSD (NBS regulation). For larger amounts use Visa/Mastercard or IPS QR.
Fees
- For the buyer: 0 RSD. You pay exactly the price shown in the cart.
- For the seller: AllSecure charges a merchant fee (typically 1.5-2.5% per transaction). The seller pays it, not the buyer.
Speed and refunds
- Authorisation: instant (1-3 seconds).
- Settlement to the seller: 1-3 business days.
- Refund on withdrawal: at most 14 days from receipt of the withdrawal statement (Art. 34 ZZP). Technically, the refund to the card takes 3-7 business days from when the procedure starts.
Plus and minus
Plus:
- Fastest — purchase in seconds.
- Best protection — 3-D Secure, chargeback procedure.
- Option to save card (token) for next time.
Minus:
- Requires a card and SMS/push confirmation.
- DinaCard limit of 200,000 RSD per transaction.
- Refund isn't instant (3-7 business days).
IPS QR (NBS NBS Pay)
How it works
NBS NBS Pay is the National Bank of Serbia's standard for instant payments. On Vondi the buyer receives a QR code (or NFC link), scans it in their bank's app, confirms amount and recipient, and the funds move instantly — directly between the buyer's and the seller's bank.
Banks that support IPS
All Serbian banks participating in IPS, which is most of them in practice: Banca Intesa, Raiffeisen, NLB Komercijalna, OTP, ProCredit, AIK, Erste, ALTA, Eurobank Direktna, and others. The list keeps growing — check your banking app for "QR payment" or "IPS QR".
Fees
- For the buyer: 0 RSD in almost all banks. A few have token charges for business clients (up to 50 RSD).
- For the seller: PaySpot (Vondi's IPS provider) usually charges a small flat fee per transaction (around 30-60 RSD), which is often much less than the percentage AllSecure fee for small amounts.
Speed
- Payment: instant (seconds).
- Money on the seller's account: instant — IPS guarantees 24/7/365 transfer in at most 5 seconds (NBS rule).
Refund on withdrawal
Slightly trickier than card: the seller has to send the money back via a transfer order. So the seller initiates the refund, the seller's bank sends, and the money lands within minutes to days depending on the bank.
Legally it makes no difference: the 14-day rule of Art. 34 ZZP applies to IPS payments too.
Plus and minus
Plus:
- Instant — both buyer and seller get confirmation right away.
- Lower seller costs (better for small amounts).
- No 3-D Secure step — you confirm everything inside your banking app.
Minus:
- Requires active mobile banking.
- Fewer banks compared to card.
- Refund depends on seller initiative (no chargeback equivalent).
Cash on Delivery (COD)
How it works
The buyer chooses "COD" at checkout. The seller hands the goods to a courier. On pickup, the buyer pays the courier in cash or by card (depending on the courier) — the courier collects from the buyer, sends funds to the seller, and takes a fee.
Couriers that support COD
- Pošta Srbije Post Express — cash or card (courier POS terminal).
- Paketomat (Pošta Srbije) — POS terminal at the locker location, you pay by card.
Fees
- For the buyer: the courier COD fee is usually 80-200 RSD (depends on weight and COD amount). Paid to the courier on pickup; visible on the airway bill.
- For the seller: double fee — both for shipment (the seller covers initial dispatch) and the courier's COD service.
Speed
- Dispatch: 1-2 days after the order.
- Delivery: 1-3 business days.
- Payment: at parcel pickup.
- Settlement to the seller: 5-15 business days after delivery (courier collects, aggregates, pays out).
Refund on withdrawal
The most complex of the three. Since money never went through a bank/card, the seller has to refund to your account. So:
- You return the goods with a withdrawal statement.
- The seller receives the parcel, checks the state.
- Refunds to your account (number you provided in the form).
- The 14-day rule of Art. 34 ZZP applies here too.
Plus and minus
Plus:
- Highest perceived security for the buyer — pay only when you have the parcel.
- No card or mobile banking required.
- Useful for first-time buys from a new seller.
Minus:
- Slowest — settlement to the seller takes weeks.
- Most expensive for both buyer and seller (courier fee).
- Real risk for the seller of buyer rejection — losing dispatch and COD fees.
- Not possible for digital goods or services.
What to choose — quick recommendation
When to choose card (AllSecure)
- Standard purchases up to 200,000 RSD (DinaCard) or unlimited (Visa/Mastercard).
- Buying from desktop, or when you'd rather not open a banking app.
- You've saved a card as a token — purchase clears in 5 seconds.
When to choose IPS QR
- Buying from your phone with active mobile banking.
- Large amount (over 200,000 RSD) and you'd like to skip Visa/Mastercard fees.
- You want instant transfer with no 3-D Secure step.
When to choose COD
- First purchase from a seller — you want extra reassurance.
- No card or mobile banking.
- You're willing to pay an extra courier fee for psychological certainty.
Security notes
All three methods are supervised by the National Bank of Serbia and comply with the Payment Services Act:
- AllSecure — PCI DSS Level 1 (highest in the industry).
- PaySpot (IPS) — registered NBS payment provider.
- Pošta Srbije Post Express — state operator, regulated by ZoT.
Vondi itself never touches your money — it only orchestrates the flow between buyer, payment processor, seller and courier. All three channels are separated, so a compromise of one doesn't affect another.
For more on security and the 3-D Secure flow, see the buyer's guide.
Conclusion
There is no single "best" payment method — it depends on the situation:
- Card is the most universal.
- IPS QR is cheapest for the seller and fastest for money in the account.
- COD offers psychological certainty but costs more and takes longer.
Vondi supports all three for the same reason: different buyers prefer different channels and have different devices. Our job is to give you all the safe options; you choose what suits you.
If you have a specific question about fees or which bank works best, write to support@mail.vondi.rs or check the tariffs page.