Adding CAPTCHA
Websites often face attacks aimed at exploiting their features for illegal purposes. In online payments, attackers often attempt to validate stolen credit card numbers or guess CVV codes by sending high volumes of automated requests mimicking human behavior.
To mitigate such threats, many merchants use CAPTCHA tools designed to distinguish real users from bots through challenges or behavioral checks. There are several implementations, with the most prominent being Google reCAPTCHA.
Hyp's CAPTCHA support
At Hyp, we support the following CAPTCHA implementations:
Google reCAPTCHA v2 (default)
Google reCAPTCHA v3
Cloudflare Turnstile
With Google reCAPTCHA v2, we use the invisible mode (reCAPTCHA v2 Invisible), which avoids the "I'm not a robot" checkbox and keeps the payment page UX seamless.
When a customer clicks Pay, CAPTCHA runs a risk analysis to decide whether to show a visual challenge or approve the request immediately. Hyp processes the transaction only after CAPTCHA either approves the request or successfully validates the challenge.
The visual challenge looks like this when Google reCAPTCHA v2 is enabled:
Here are a few things to note before requesting to enable CAPTCHA:
Hyp cannot influence CAPTCHA results. It also cannot control whether a visual challenge appears to users.
Although CAPTCHA is widely used, some users may struggle with visual challenges, potentially leading to abandoned transactions.
If CAPTCHA is unavailable, Hyp bypasses it and processes transactions without verification.
For payment pages in iframes, ensure minimum dimensions of 580 (height) by 400 (width) pixels to display the CAPTCHA challenge properly.
Enabling CAPTCHA
CAPTCHA is disabled by default. If you want to enable it, contact Hyp support. The default implementation is Google reCAPTCHA v2, but if you prefer a different implementation, please inform the support team.
CAPTCHA is enabled per merchant ID (MID) and becomes available on all terminals related to this MID.
Last updated
Was this helpful?