🎓 CoursesMarkets & internationalIntermediate⏱ 60 min
🏛️
Collecting payments for the public sector. 7 chapters and a final quiz.
Work on government payment flows without the reflexes of merchant acquiring. Classify a public flow and find the rule that mandates its channel, connect to a mandatory public platform, build a payable notice with its reference and QR code, size a mass benefit payout, wire up national ID addressing, calculate what late payment by a public buyer costs, and audit the payment journey against WCAG 2.2 Level AA.
Classify a public payment flow into one of four families and find the rule that mandates its channel, before choosing any provider
Connect to a mandatory public platform and build reconciliation on the debt identifier
Build a payable notice: reference, EMVCo QR code, merchant category code, legally binding receipt
Size a mass benefit payout and handle last-mile failures
Chapter 1. Classifying the flow and finding the rule that mandates it.
A public-sector collection project starts with reading, not with integration. The question is not which provider offers the best API. It is whether the channel is open, and for a large share of public payment flows it is not. The applicable rule then designates a platform that payments must go through, a standard notice format, and sometimes a mandatory debt identifier. The provider complies or it does not operate.
The first hour of the project therefore goes to four questions. The first two establish the direction of the flow and the party facing the agency. The next two identify the rule that governs the channel and the proof you must produce once the transaction is complete. A project lead who answers all four already knows what they can promise the public-sector client. One who starts with the provider’s technical documentation will discover the constraint during acceptance testing, a quarter later.
Question
Where to find the answer
Impact if the answer is “yes”
Must payments go through a public platform?
A decree, a budget act, or a central bank circular, never the tender specifications
The choice narrows to certified member providers; allow a quarter to connect
Does the debt carry a standardized identifier?
Notice specification published by the creditor agency
All reconciliation is built on it, and the identifier becomes the log’s primary key
Is the price charged to the payer regulated?
Regulator’s circular, published fee schedule, pricing order
The business model depends on volume and unit cost, not on the fee
Does the payment start a statutory clock?
Tax code, local government regulations, public procurement law
The receipt becomes legally binding; its timestamp and retention come into scope
Can the beneficiary be unbanked?
The program’s target population, national financial inclusion data
The cash-out channel becomes a deliverable in its own right, with its own coverage and liquidity
Does a national ID serve as the payment address?
Instant payment rail or clearing house documentation
The originator no longer sends bank details, and loses control over which account is credited
Is the invoicing channel mandated for the supplier?
A directive or law on e-invoicing, and the transport network’s directory
An invoice sent outside the channel counts as not received, and no payment clock starts
Is the service subject to an accessibility requirement?
National law transposing digital accessibility rules for public bodies
The payment journey falls within the audit scope, with a public statement to maintain
Eight qualifying questions to ask before the RFP
Three overlapping regimes that half of all projects confuse
Accepting means being authorized to offer a payment instrument to the public on behalf of an agency. It depends on the provider’s license and its membership in the national program.
Certifying means producing proof that the revenue was received: a timestamped receipt, a serial number, legally binding archiving. It often falls under a separate tax law, with its own authorization.
Collecting means receiving the funds, holding them, and paying them over to the public accounting officer. It depends on payment institution or e-money institution status, and on the local safeguarding regime.
A project that has covered only two of these three regimes is not compliant. It passes technical acceptance testing and fails the compliance review.
⚠️
The ban targets the provider, not just the agency
The Italian case shows how to read these rules. Since February 28, 2021, a payment service provider authorized in Italy may no longer execute a payment to a public administration outside pagoPA. The rule comes from Article 65(2) of Legislative Decree 217/2017, as amended by Article 24 of Decree-Law 76/2020. It also binds foreign firms operating under the freedom to provide services. A standard checkout flow connected to an Italian university or hospital is unlawful, not just inefficient.
That leaves finding the rule, and three sources cover almost every case. The country’s official gazette publishes the decrees and budget acts that create the program. The central bank’s website collects the circulars, fee caps, and membership requirements imposed on providers. The tax authority publishes its notices, rollout schedules, and payment notice specifications. These documents are free, dated, and legally binding. Reading them takes a few hours per market; skipping them costs a quarter of project time.
🎯 Quick question
A public agency mandates a standardized debt identifier. What architecture decision does that trigger immediately?
Chapter 2. Connecting: mandatory hub or biller network.
Two architectures dominate connections to public-sector debts. The first places a government platform between the agency and the industry, and pagoPA, operated since 2016 by PagoPA S.p.A., is its most mature form. The second publishes the debt on a biller network open to every channel, such as Bharat Connect in India, JomPAY in Malaysia, or CBILL in Italy. The integration work differs, but the reconciliation principle stays the same.
Three situations defeat reconciliation on the amount-and-date pair. A partial payment, where the program allows it. A debt canceled between the notice being issued and the actual payment. Two payers paying the same amount on the same day into the same treasury. Remittance information doesn’t help, because some rails truncate it and the payer can edit it. The debt identifier is the key, and it goes into the log from the first line of code.
The business model deserves a separate note, because it surprises teams coming from merchant acquiring. On a mandatory hub, every certified member can access the debt, with no negotiation and no exclusivity. Competition therefore shifts entirely to the fee shown to the payer and the quality of the channel. A business plan built on exclusive access does not exist; one built on volume and unit cost holds up.
🎯 Quick question
On a mandatory public hub, where do member providers compete?
Chapter 3. Collecting taxes and fines: building a payable notice.
In public-sector collection, the product is the notice; the checkout flow merely pays it. A payable notice carries four non-negotiable elements: a unique reference, a legally binding amount, an identifiable payee, and a due date. The channel comes second. The agencies that got collection right standardized the notice first, then let the market connect as many channels to it as it wanted.
Anatomy of an EMVCo merchant QR code
Notice template as a merchant QR code, with the specification’s field IDs and sample values
ID Len Value Field
00 02 01 Payload Format Indicator
01 02 12 Point of Initiation Method (11 static / 12 dynamic)
26 .. .... Merchant Account Information — national rail
52 04 9311 Merchant Category Code — 9311 Tax Payments
53 03 978 Currency, ISO 4217 numeric
54 06 124.50 Amount due
58 02 XX Country code
59 21 CITY TREASURER OFFICE Payee name
60 07 ANYTOWN Payee city
62 .. Additional Data Field Template
01 14 2026-AV-004821 Bill Number — the notice reference
05 09 LEVY-2026 Reference Label
63 04 A13F CRC
The declared length counts the characters of the value, not of the header:
“59 21” is indeed followed by 21 characters. A one-byte discrepancy invalidates the rest
of the string, because the reader decodes every following field at the wrong offset.
Source of the field identifiers: EMVCo, “EMV QR Code Specification
for Payment Systems — Merchant-Presented Mode,” v1.1, November 27, 2020.
Two mistakes recur with this template, and both come back to bite at reconciliation. The first is generating a static QR code for an individual debt. There is no amount, so the payer types it in, and every discrepancy becomes a manual investigation. The second is putting the notice reference in the payee name, a field many apps truncate on screen. The sub-field designed for it is the Bill Number, inside the Additional Data Field Template.
Code
Meaning
Practical effect of the code
9311
Tax Payments
Dedicated interchange category at the card networks; determines eligibility for convenience fees charged to the payer
9222
Fines
Fines: fixed amount, no cart, refunds rare and always handled by the issuing authority
9223
Bail and Bond Payments
Bail bonds: enhanced monitoring and acceptance restrictions at several issuers
9211
Court Costs, Including Alimony and Child Support
Court costs: the payer is not the one receiving the service, which changes how disputes are handled
9399
Government Services (Not Elsewhere Classified)
Catch-all for government services; a code that is too generic muddies analysis and pricing
9402
Postal Services — Government Only
Reserved for government postal services; using it for a private operator fails network checks
Public-sector merchant category codes (ISO 18245) and what they drive
Choose the code together with the creditor agency, not on your own. It determines the interchange category, how issuers assess risk, and whether a convenience fee can be charged to the payer. The EMVCo specification handles that fee in fields 55, 56, and 57: a tip or convenience indicator, a fixed amount, and a percentage. A notice that shows the fee only after confirmation exposes the agency to a challenge.
⚠️
Four cases that break tax collection in production
Partial payment, when the debt accepts only payment in full but the rail accepts partial amounts. The canceled debt, voided between the notice and the payment, which leaves a payment with no debt behind it. Double payment through two channels at once, for lack of a lock on the identifier. The fine paid twice, whose refund goes through the issuing authority, not the provider. All four cases must be handled at design time. In production, they turn into litigation.
448.6M
payments made through pagoPA in 2025, worth €100.5B
PagoPA S.p.A., 2025 data
50.50M
QRIS users and 32.71 million enrolled merchants
Bank Indonesia, 2024 data
₹14.8 lakh crore
value processed by Bharat Connect in 2025, vs. ₹0.96 lakh crore in 2021
NPCI Bharat BillPay
🎯 Quick question
A municipal treasury wants one QR code per notice, with the amount prefilled and automatic reconciliation. Which setup should it choose?
Chapter 4. Paying out benefits: channel, rejects, and the last mile.
Sending a payout file is the easy part; the hard part comes after. You have to reach hundreds of thousands of unbanked beneficiaries, on a fixed date, with a usable audit trail. Here the technical success rate measures only whether the credit was executed, not whether the beneficiary actually received it. A credit posted to a dormant wallet, in a village where no agent has cash, has paid out no aid and triggered no reject. Choose the channel based on that constraint, never on cost per transaction.
The question
Winning channel
Systems in operation
What to negotiate
Are beneficiaries out of reach of a bank branch?
Mobile money, through an agent network
M-Pesa (Safaricom, Kenya, 2007), Wizall Money (licensed by the BCEAO, the West African central bank, in Senegal, Côte d’Ivoire, Burkina Faso, and Mali)
The withdrawal fee paid by the beneficiary and agent density per municipality
Does the government also want to kick-start a domestic scheme?
Dedicated government card
Meeza (Egyptian Banks Company, 2019), e-zwich (GhIPSS, 2008), Korti Milli (National Bank of Tajikistan, 2017)
The acceptance network to build and the card issuance schedule
Is there an identity registry that can be queried online?
Instant rail with ID-based addressing
APBS on NACH (NPCI, India, 2016), PromptPay (National ITMX, 2017), Pix (Banco Central do Brasil, 2020)
How current the ID-to-account mapping is, and the dispute procedure
Must the payout work without a phone or network coverage?
Offline instrument with local authentication
e-zwich (fingerprint, offline), Direct Express (Bureau of the Fiscal Service, 2008)
The upload cycle for deferred transactions and the offline limit
Choosing the payout channel: the question drives the answer
Budget the reject rate up front instead of discovering it
Unregistered alias. The beneficiary never linked their identifier to an account. Rejected at resolution, before any funds move.
Dormant account or wallet. The credit goes through, but the beneficiary never sees it. There is no reject: it is a silent payout, detectable only by tracking withdrawals.
ID tier limit. An account opened with simplified KYC declines any amount above its tier’s limit. AfricaNenda’s SIIPS 2025 report identifies this as a direct obstacle to scaling up government payments.
Recycled number. A mobile number reassigned by the carrier sends the benefit to someone else. Check the date of last activity, not whether the format is valid.
Death or exit from the program. The eligibility file and the payment database drift apart. Reconcile the two before each cycle, never after.
Plan for a benefit payout cycle: the parameters to lock before the first run
cycle:
value_date: 2026-09-05 # date funds are promised to the beneficiary
issue_window: 2026-09-03 # D-2, to absorb a full rerun
expected_volume: 1_840_000
est_withdrawal_peak: 0.62 # share withdrawn within 48 h of the credit
resolution:
every_cycle: true # never cache the ID-to-account mapping
keep_response: true # timestamped, for the audit trail and disputes
rejects:
budget: 0.035 # 3.5% provisioned, measured on the previous cycle
retry: D+2 # a single retry, then switch to the fallback channel
fallback_channel: licensed_counter
last_mile:
min_agents_per_municipality: 2
min_agent_liquidity: 4x_average_amount
max_withdrawal_fee_pct: 1.0 # above this, the benefit is cut and the goal is missed
⚠️
A posted credit is not a completed payout
The GSMA counts 347 million active mobile money accounts out of roughly 1.2 billion registered (State of the Industry Report, 2026). The gap measures the problem. An agent 15 km away, an agent who runs out of cash on payday, a withdrawal fee that eats into the allowance: three ways to undo a payout that technically succeeded. Size these peaks before launch; after that, all you can do is absorb them.
One last reflex prevents projects that are dead on arrival. A country’s dominant channel cannot simply be copied into another. Vodacom shut down M-Pesa in South Africa in June 2016, with about 76,000 active users against an initial target of 10 million (Vodacom, 2016). The model came from an underbanked market and landed in one where people already had bank accounts. Every benefit payout program is exposed to the same mismatch between the rail chosen and what the target population actually uses. Choose the channel based on the measured target population, not on the rail’s international reputation.
🎯 Quick question
A payout file goes out to mobile money wallets. Which failure leaves no trace when the file is sent?
Chapter 5. Wiring up national ID addressing.
Several countries have dropped the bank-details database from their benefit payments. The payment instruction goes to a public identifier, and the rail finds the account mapped to it. The agency no longer has to keep bank details up to date for each beneficiary, but in exchange it no longer knows which account gets credited. That transfer of control is the subject of this chapter, and it is solved by design, never by customer support.
2011
AePS in India
The NPCI enables cash withdrawals and payments using Aadhaar biometric authentication at a business correspondent, with no card or phone.
2016
NACH and the Aadhaar Payment Bridge System
The NPCI’s bulk rail addresses direct benefit transfers by Aadhaar number, India’s national ID, rather than by bank details.
2017
PromptPay and PayNow
PromptPay (National ITMX, under a mandate from the Bank of Thailand) accepts the national ID number as an alias; PayNow (Association of Banks in Singapore) accepts the NRIC for individuals and the UEN for businesses.
2020
Pix in Brazil
The Banco Central do Brasil includes the CPF and CNPJ, the tax IDs for individuals and companies, among the addressing keys.
January 2025
SIPS in Somalia
The Central Bank of Somalia launches an instant payment rail covering P2P, P2M, and G2P, in a country where mobile money predated banking infrastructure.
June 27, 2025
RBI tightens rules for AePS touchpoints
The RBI publishes the Due Diligence of AePS Touchpoint Operators directions (RBI/2025-26/63), which require full due diligence on every operator, location profiling, and velocity limits.
January 1, 2026
AePS directions take effect
Indian touchpoint operators come under an onboarding and monitoring regime comparable to that of merchant acquirers.
Rail
Accepted aliases
Who declares the mapping
Check to run before sending
APBS / NACH (NPCI, India)
Aadhaar number
The beneficiary’s bank, via the NPCI mapper
Resolve on every cycle and archive the timestamped response; resolution overrides any stored data
PromptPay (National ITMX, Thailand)
Mobile number, national ID, business tax ID, e-wallet ID
The account holder, through their bank
Check which alias type the program expects: one beneficiary may hold several
PayNow (Association of Banks in Singapore)
Mobile number, NRIC for individuals, UEN for businesses
The account holder, through their bank or payment institution
Keep payments to individuals strictly separate from payments to businesses: the aliases come from different registries
Pix (Banco Central do Brasil)
CPF, CNPJ, mobile number, email, random key
The account holder, in their banking app
Show the resolved name before confirmation and log the originator’s approval
Four public aliases and what they require of the system designer
Four design rules that prevent litigation
Resolve on every cycle; never cache the mapping. The mapping is declarative and can move without the beneficiary asking for it.
Archive the resolution response with a timestamp. It is the only record that shows where the money was sent, and why.
Show the resolved name to the originator before sending, where the rail allows it, and keep a record of the confirmation.
Set up a dedicated dispute procedure for payments that land in an unwanted account, separate from regular payment support.
⚠️
The credited account is not always the one the recipient expects
A beneficiary opens an account elsewhere, the new bank declares the mapping, and the next benefit goes there without the beneficiary asking for it or being told. The linked inclusion rail carries the mirror-image risk. Fraud involving identity theft and biometric data capture has been documented among Indian touchpoint operators. The RBI responded on June 27, 2025, with directions RBI/2025-26/63, in force since January 1, 2026.
Where no identity registry can be queried online, alias-based addressing is out of the program’s reach, and accounts opened with simplified KYC stay stuck at the lowest tier of regulatory limits. AfricaNenda’s SIIPS 2025 report, published on November 13, 2025, with the World Bank and UNECA, calls this a direct obstacle to scaling up government payments. Identity is not a peripheral component of the system. It is what makes the system possible.
🎯 Quick question
A ministry caches the ID-to-account mapping resolved in the previous cycle to speed up processing. What should it expect?
Chapter 6. Selling to government: proper invoices and the cost of delay.
A government contractor does not face non-payment risk comparable to ordinary B2B. The government pays. It pays late, on a schedule set by law rather than by the supplier’s terms of sale. Working capital needs must therefore be calculated from the applicable law and the buyer’s observed behavior. Two parameters drive everything: whether the invoice is proper, and the payment period that runs from it.
Item
Where to get it
What breaks without it
The channel accepted by the buyer
National e-invoicing law, then the entity’s accounting department
The invoice is deemed not received; no payment period runs, and late payment cannot be claimed
The expected syntax
European semantic standard in UBL and CII syntax, or a mandated national format
Automatic rejection on submission, often with no usable notice to the supplier
The routing identifier of the entity
Transport network directory, or the agency’s public registry
The invoice goes to a neighboring entity, or stalls with no recipient
The receiving department
The buyer itself: one entity often has several
The document circulates between departments for weeks, with no clock running
The late-payment penalty regime
The law governing the contract, not the terms of sale
The supplier doesn’t know whether it must file a claim, and lets the right lapse
What to secure before the first delivery, and what breaks without it
The most operational difference between regimes is not the number of days. It is who has to act. In the US, the Prompt Payment rules pay the interest penalty automatically, without any claim from the supplier (FAR 52.232-25; 5 CFR Part 1315). In the EU, Directive 2011/7/EU creates a right that the creditor must exercise: interest at the reference rate plus at least eight percentage points, and a flat recovery fee of at least €40 (Articles 4 and 6). Few suppliers exercise it against a public client whose next contract they hope to win.
Costing the delay in two calculations
Carrying cost and interest owed: a worked example with explicit assumptions
ASSUMPTIONS (replace with your actual data)
invoice amount F = EUR 250,000
statutory payment term Dl = 30 days
actual payment time Dr = 74 days # measured over 12 months of history
annual cost of financing t = 6.5% # your credit line
reference rate + 8 pts i = 11.15% # reference rate assumed
# at 3.15%; Directive 2011/7/EU
1. CARRYING COST OF THE DELAY (what the delay costs you)
Cp = F x t x (Dr - Dl) / 365
Cp = 250,000 x 0.065 x 44 / 365 = EUR 1,958.90
2. STATUTORY INTEREST OWED (what the delay is worth, if you claim it)
Il = F x i x (Dr - Dl) / 365 + flat fee
Il = 250,000 x 0.1115 x 44 / 365 + 40 = EUR 3,400.27
3. TAKEAWAY
The law covers the carrying cost, and more. The difference is not a windfall:
it is the price of claiming, which most suppliers choose to forgo.
Model it in the bid, line by line, before you submit your price.
⚠️
The clock starts only with a proper invoice
The number one B2G trap is purely procedural. An invoice submitted outside the channel, or not in the expected syntax, is deemed not received, and the supplier finds out two months later that it has no late payment to claim. National mandates are multiplying and getting stricter. In Kenya, the public notice of June 8, 2026, makes expenses deductible only if the invoice was issued through eTIMS. In Malaysia, MyInvois has been rolling out in phases since August 1, 2024, with the exemption threshold raised to RM1 million by the guidelines of December 7, 2025. Singapore transmits invoice data to its tax authority, IRAS, through InvoiceNow, a national network built on Peppol.
One distinction closes the chapter, and it regularly gets lost in scoping meetings. The semantic standard describes what the invoice contains; the transport network describes how it reaches the buyer. Directive 2014/55/EU requires contracting authorities in the EU to receive and process invoices that comply with the European standard. It does not designate any network. Peppol, launched as an EU pilot project in 2008 and governed by OpenPeppol AISBL since 2012, is one; Italy mandates its own, the Sistema di Interscambio. An invoice that is fully compliant semantically still goes nowhere on a channel the receiving government does not accept.
🎯 Quick question
A supplier sees actual payment times of 74 days where the law sets 30. What should it do first?
Chapter 7. Accessibility and inclusion: the duty to serve everyone.
A merchant that loses 2% of its visitors loses 2% of its revenue. A government agency that loses 2% of its users misses its policy objective and leaves a debt unpaid. The other party can neither go elsewhere nor walk away from the transaction. Accessibility is therefore not a finishing touch on the public payment journey. It is a compliance requirement, backed by dated legal texts and enforceable deadlines.
Framework or standard
Who it covers
What it requires
Dates
Directive (EU) 2016/2102
Websites and mobile apps of EU public sector bodies
Presumption of conformity through the harmonized standard (Article 6); a public accessibility statement and a feedback mechanism that lets users report non-conformity (Article 7)
Adopted October 26, 2016
EN 301 549
Digital products and services in the EU
Functional accessibility requirements; the standard that triggers the presumption of conformity
Cited in Article 6 of Directive 2016/2102
WCAG 2.2 (W3C)
Web content, all jurisdictions
Technical reference with Levels A, AA, and AAA, on which national laws are based
W3C Recommendation, revised December 12, 2024
ADA Title II rule (Department of Justice, US)
US state and local governments
Web content and mobile apps must conform to WCAG 2.1 AA
Final rule published in the Federal Register on April 24, 2024; deadlines pushed back by the interim rule of April 20, 2026, to April 26, 2027 (entities with a population of 50,000 or more) and April 26, 2028 (smaller entities and special districts)
Frameworks and standards that apply to a public payment journey
Five criteria that payment journeys fail
2.2.1 Timing Adjustable (Level A). The payment session expires with no option to extend it. A slow user loses their input and their notice reference.
3.3.8 Accessible Authentication (Minimum) (Level AA). The one-time code field blocks paste, forcing users to transcribe the code.
3.3.7 Redundant Entry (Level A). The next step asks again for the notice reference the user has already entered.
2.5.8 Target Size (Minimum) (Level AA). The button that confirms the amount is too small to be a reliable touch target.
3.2.6 Consistent Help (Level A). The help link moves between the notice page and the payment page.
⚠️
The one-time code field that blocks paste
This is the most common failure in authentication flows, and the W3C addresses it explicitly. Its Understanding document states that blocking paste, or requiring an input format different from the copied text, forces the user to transcribe and therefore fails criterion 3.3.8, unless another authentication method is available. The criterion assumes the code is available on the clipboard, and conformance is verified by testing that the field accepts paste. The fix is one line of code. An audit that misses it leads to a full remediation.
📵
No smartphone
UPI 123PAY (NPCI, 2022) brings India’s instant payment rail to feature phones through IVR, missed calls, or an embedded app. It is a rare example of a system designed explicitly for people without smartphones.
🏦
No bank account
e-zwich (GhIPSS, a subsidiary of the Bank of Ghana, 2008) authenticates by fingerprint and works without an existing bank account. It carries Ghana’s public sector salaries and social programs.
📡
No reliable network
Offline instruments remain the only answer when telecom networks are degraded. Iraq’s Qi Card (International Smart Card, 2007) and e-zwich process transactions without a network connection and upload them later.
🏧
No ATM nearby
Pix Saque and Pix Troco (Banco Central do Brasil, 2021) turn merchants into cash withdrawal points, with no ATM and no cash-in-transit. The merchant moves to the paying side of the flow, with the accounting consequences that entails.
🔑
A single channel excludes people, however good it is
An agency that offers only one payment method automatically shuts out some of its users, and the principle holds in both directions of the flow. On the collection side, a physical counter, a digital channel, and a local intermediary reach populations that only partly overlap. On the payout side, the gap between registered accounts and truly active accounts measures exactly who the main channel fails to reach. The design rule fits in one sentence. Size the fallback channel at launch, not after the first incident.
🎯 Quick question
An audit finds that the one-time code field on the payment portal blocks paste. Which WCAG 2.2 criterion is at issue, and at what level?