Sri Lanka’s digital payments ecosystem continues to evolve as banks invest in modern infrastructure capable of supporting growing e commerce and cardless transactions. Commercial Bank of Ceylon has announced a strategic partnership with payment technology firm Bancstac aimed at strengthening its payment gateway capabilities, improving transaction security, and expanding digital payment acceptance across the country.
Building a Bank Controlled Payment Processing Environment
Under the agreement, Commercial Bank will implement Bancstac’s payment processing infrastructure through a long term technology services framework. The new architecture is designed to give the bank full operational control over digital transaction processing while maintaining strong security and regulatory compliance.
Merchants working with the bank will integrate directly with the bank’s Internet Payment Gateway to process online transactions and card not present payments. The system creates a secure and encrypted connection between the bank’s internal systems and Bancstac’s payment infrastructure, reducing reliance on external intermediaries and ensuring that transaction flows remain under the bank’s governance.
Transaction authorisation and settlement will continue to run through the bank’s switching infrastructure, allowing the institution to maintain visibility across payment processing activities and manage operational oversight internally.
Expanding Payment Acceptance Across Multiple Channels
The enhanced gateway platform already supports major global card networks including Visa, Mastercard and UnionPay. The bank plans to extend acceptance further by enabling additional international schemes such as JCB while also supporting Sri Lanka’s domestic payment networks.
The infrastructure will also accommodate non card payment methods including LankaQR, enabling merchants to accept a wider range of digital payment options through a single integration. This approach aligns with the growing adoption of QR based and alternative payment channels across the Sri Lankan digital commerce landscape.
Advanced Fraud Controls and Operational Capabilities
Beyond payment processing, the Bancstac platform provides a broad set of operational and security capabilities designed to support merchants and maintain payment integrity.
Key capabilities include:
- advanced fraud mitigation and risk monitoring tools
- merchant onboarding and administration systems
- tokenisation and hosted payment pages
- automated reporting and transaction reconciliation
- chargeback management and refund processing
- scheduled and batch payment functionality
The platform also includes 24 hour system monitoring, operational alerts, and technical support designed to maintain uptime and transaction reliability across the payment ecosystem.
Security and Compliance at the Core
The infrastructure is built around global payment security standards including PCI DSS and PCI 3DS certifications. The technology environment also aligns with international information security frameworks such as ISO 27001 and incorporates data protection practices consistent with global privacy requirements.
Importantly, Commercial Bank retains full authority over merchant onboarding, system access, reporting visibility and transaction governance. The bank also maintains control over refund approvals, fee calculations and risk management processes, ensuring that compliance obligations and regulatory requirements set by the Central Bank of Sri Lanka remain fully enforced.
Supporting Sri Lanka’s Digital Payments Growth
The bank expects the upgraded payment infrastructure to improve authentication rates, accelerate transaction authorisation, and reduce payment failures across online channels. The system will also allow new payment innovations to be introduced without requiring merchants to complete additional integrations.
As Sri Lanka continues its shift toward digital commerce, investments in secure and scalable payment infrastructure are becoming a critical priority for banks looking to support merchants, consumers and emerging digital payment models.
What this means for the industry
- Banks are investing heavily in modern payment gateway infrastructure to support growing digital commerce volumes
- Direct bank controlled payment processing is becoming a priority as institutions seek greater visibility and governance over transactions
- Merchants increasingly expect multi channel payment acceptance including cards, QR payments and alternative digital methods
- Payment infrastructure partnerships between banks and fintech providers are accelerating across
