A merchant planning to accept cryptocurrency should map how a customer’s payment becomes an order decision, decide what happens to assets received, assign operational responsibility, and define how exceptions will be handled. The specific design depends on the merchant’s sales channels and the assets, networks, and services it chooses to support. Those details need verification for the intended operating locations before launch.
What a merchant crypto-payment integration needs to decide
Payment acceptance and asset handling are separate decisions. Acceptance covers how a customer receives payment instructions and how the merchant determines whether an order can proceed. Asset handling concerns what happens to cryptocurrency after payment—for example, whether the merchant retains it or uses a separate arrangement to convert or settle it. Accepting a payment does not, by itself, specify how the merchant will handle the asset afterward.
Start by identifying the sales channels in scope and the systems that must exchange information. A planning map might include the customer-facing checkout, payment-status handling, order management, customer support, and accounting. For each system, state what information it needs and which system is authoritative for the order’s status. This helps prevent a payment notification from becoming an implicit order decision without a defined business rule.
List the assets and networks the merchant is considering, but treat that list as a requirement to verify rather than a promise that support is available. Payment instructions are not interchangeable across all assets and networks: compatibility and acceptance depend on the requested asset, network, destination, recipient requirements, and service. Check the exact combination against current documentation for the selected arrangement.
Keep operating-location availability, service terms, fees, settlement timing, and jurisdiction-specific obligations as open questions until evidence for the particular situation is gathered. General Bitcoin payment guidance does not establish legal or tax conclusions for a merchant’s circumstances. Applicable local authority or a qualified professional can address those situation-specific questions.
Map the payment flow before choosing an integration pattern
Write down the end-to-end sequence before deciding whether internal systems or an external payment service will handle parts of it. Map order creation, presentation of payment instructions, customer submission, status communication, the decision to release or hold the order, and recordkeeping. For each step, name the system responsible and the person or team that will resolve a failure or ambiguity.
A payment status must have a defined operational meaning. For an on-chain payment, broadcast means a transaction has been sent to the network; it does not alone establish that the merchant’s fulfillment conditions have been met. The merchant’s configured settlement conditions should govern fulfillment. Those conditions depend on the network, asset, amount, product, and risk tolerance, so they should be documented for the chosen flow rather than presented as a universal rule.
Include exception paths in the map, not just the expected successful path. Decide how staff will handle a payment that is short, exceeds the requested amount, arrives after the relevant order window, appears more than once in a notification, or uses an unsupported asset or network. Also define what happens when payment information is unclear or order and payment records disagree.
Use clear internal definitions for each status that affects an order decision. A documented invoice system, for example, distinguishes states such as awaiting payment, processing, settled, expired, invalid, partial, overpaid, and late. Those are examples from one implementation, not a universal status vocabulary. Record how the merchant’s chosen system maps its statuses to actions such as hold, investigate, or release.
Choose how payment acceptance connects to merchant systems
At the integration boundary, specify what information passes between checkout, payment-status handling, order management, support, and accounting. The workflow may need an order reference to associate a payment with a purchase, along with status, relevant timestamps, and asset or network identifiers. Limit customer information to what the workflow requires. One documented invoice metadata pattern supports an external merchant order ID for correlation and cautions against sending unnecessary customer data.
If an external service communicates status changes to merchant systems, decide how the receiver will authenticate those messages and handle repeats or changes that arrive out of order. A webhook is a message a service sends to notify an integration about a change in transaction state. One documented e-commerce integration pattern calls for signature validation and handling states such as processing, settled, expired, invalid, partial, overpaid, and late. That pattern does not make its labels or process a rule for every service.
The merchant also needs a controlled way to compare status notifications with the authoritative order and payment records before granting irreversible value. Assign responsibility for resolving conflicts, and specify what evidence staff should consult. This is an operational boundary: a notification informs the merchant’s systems, while the merchant’s order policy determines what action follows.
Keep this planning guide distinct from detailed website checkout implementation. Endpoint design, callback code, confirmation logic, and production reconciliation procedures require a separate technical specification. Here, the key decisions are which systems exchange status, which record is authoritative, and who resolves a mismatch—not how to implement a particular callback.
Decide what happens to received cryptocurrency
Choose explicitly whether the merchant intends to retain received assets or use a conversion or settlement arrangement. Then identify who controls the relevant accounts and who can authorize transfers or operational changes. Acceptance alone does not establish a conversion route, settlement currency, timing, or fee.
Verify the selected arrangement against current, relevant documentation. Confirm that the exact asset and network are supported for the business and intended operating location, and review documented conversion mechanics, settlement timing, fees, and terms. These details are specific to the arrangement. Do not infer support or conditions for one asset, network, region, or service from information about another.
If documentation does not answer a question, record it as unresolved and assign an owner to obtain an answer. This is especially useful when the merchant’s operational plan depends on a particular settlement time or conversion path. Avoid treating an estimate or general description as a commitment about the merchant’s own transaction.
Connect transaction records to merchant order records so staff can investigate discrepancies. Specify which records accounting needs and how the merchant will distinguish a payment awaiting review from one accepted under its own settlement conditions. Recordkeeping and accounting treatment are merchant-specific; this guide does not determine accounting, tax, legal, or regulatory obligations.
Assign operational controls and exception ownership
Assign a role or team to monitor payment status, answer customer inquiries, manage order holds, reconcile records, and escalate unresolved cases. For each exception, document who makes the next decision and what information they review. A mismatch between an order record and a payment-status record should have a defined investigation route rather than being settled by assumption.
Document refund procedures before accepting payments. Resolve practical questions such as which asset and network a refund would use, how the destination is checked, what approvals are required, and which records must be kept. These are planning questions; they do not imply that a particular payment can be reversed or refunded. The process depends on the merchant’s selected arrangement and policies.
Review account and key responsibilities for the actual setup. Identify who has access, how access is granted and reviewed, and how incidents or unavailable personnel and services are escalated. List external service dependencies and the merchant’s response when a service is interrupted or a payment status remains unclear. Do not describe the setup as secure or recoverable without evidence specific to it and procedures that have been evaluated.
Use a merchant launch checklist to validate the integration
Before production acceptance, define scenarios for successful, delayed, failed, duplicate, mismatched, and out-of-order payment-status information in an appropriate test environment. For each scenario, specify the expected order state, customer communication, operational alert, and accounting record. A test plan does not establish that an implementation works; record results only after scenarios have actually been run.
Check that staff can follow the documented procedures for refunds, reconciliation differences, service interruptions, and unresolved payment states. Verify that the assets, networks, fees, timing, terms, and operating-location availability match current documentation for the arrangement being launched. Assign an owner to each remaining limitation or unanswered question.
Before enabling production acceptance, record the evidence reviewed, unresolved risks, accountable owners, and go-live approval criteria. The merchant should be able to explain how payment status informs an order decision, how received assets are handled, and who takes responsibility when the normal flow fails. Detailed website callback implementation and confirmation handling remain separate checkout implementation work.
Sources and references
- eCommerce Integration Guide — BTCPay Server; retrieved 2026-10-18.
- Invoices — BTCPay Server; retrieved 2026-10-19.