Beep2Pay and the Payment Gateway — Built for Real Business
Merchants can now send push payment requests to customers, view full transaction history in Beep2Pay, and benefit from a more secure and transparent checkout experience across the BeepXtra payment gateway.
A major round of improvements has landed across the Beep2Pay merchant app and the BeepXtra payment gateway — making it faster to collect payments, easier to track your business, and giving your customers a checkout experience they can trust.
Beep2Pay — Merchant App
Send Payment Requests to Customers via Push
You no longer need a customer to present their card or scan a QR code to initiate a payment. Beep2Pay now includes a Push Payment mode on the POS screen. Enter the amount, send the request, and your customer receives a push notification on their BeepXtra app. They review the amount and approve it — done. The payment is confirmed in real time. This is particularly useful for table service, delivery, or any scenario where the customer isn't standing at a terminal.
QR Scan Mode
QR Scan mode has been added to the POS screen as a second payment method — giving merchants a flexible choice depending on the situation. Push request or QR scan: you decide which fits the moment.
Full Transaction History
The Beep2Pay app now includes a dedicated transaction reports screen. Your 10 most recent transactions are shown on the dashboard at a glance — amount, time, and status. The full history screen gives you a complete chronological record of every payment processed through your account. Real-time payment alerts via push notification mean you know the moment a payment lands, even if you're away from the screen.
Login and Session Fixes
Two bugs that were silently causing login failures have been resolved — passwords containing the @ character no longer fail at login, and sessions now persist correctly when the app is closed and reopened. PIN masking and the eye icon toggle have also been fixed. These aren't headline features, but they're the kind of issues that erode trust in a tool you rely on every day.
BeepXtra Payment Gateway
3-Step Payment Progress Indicator
The gateway checkout flow now shows a clear, persistent three-step indicator — Identify, Pay, Done. Customers always know exactly where they are in the process. Ambiguity at the payment step costs conversions — this removes it entirely.
OTP Confirmation for High-Value Payments
For transactions above a configurable threshold, the gateway now automatically triggers an OTP step. The code is delivered via push notification to the cardholder's BeepXtra app by default, with an email fallback available. Cardholders can select their preferred channel from a dropdown if needed. The OTP step is invisible for low-value payments and activates only when the amount warrants the extra layer of security.
Session Expiry — No More Silent Failures
If a payment session expires before completion, the cardholder now sees a clear, human-readable message explaining what happened and what to do next. Previously this resulted in a silent failure with no guidance. The fix also includes proper cache control headers and a page reload handler to prevent the browser from serving a stale payment page from its back-cache.
Your Outlet's Logo on the Checkout Screen
Your outlet's logo now appears in the payment information panel during checkout. For cardholders completing a payment, seeing a familiar brand mark at the moment of confirmation builds trust and reduces hesitation at checkout.
Mobile Checkout — Fixed
Card input on mobile had a broken nested input group that made it difficult to use on smaller screens. That's been replaced with a properly responsive layout. The card lookup race condition — where rapid input could trigger conflicting results — has also been resolved. The pay button now correctly shows "Processing…" during submission and restores on error, so cardholders always have clear feedback.
Security Hardening
This release includes a significant security sprint across the gateway. CSRF token protection has been added to all AJAX calls. SQL injection vulnerabilities have been patched across all gateway-reachable queries. XSS prevention is applied to all user-supplied output. Session cookies are now hardened with HttpOnly, Secure, and SameSite=Lax flags. Payment parameters are read server-side from the session rather than from the POST body, preventing tampering. PIN values are no longer logged. These changes are invisible to users — they're meant to be.
Beep2Pay is available at app.beepxtra.com. Gateway changes are live now across all integrated outlets. Contact us if you need assistance.