On Private / Go to Business

New EU Payments Directive as of 14th September 2019 – Change in Sofortüberweisung under the Second EU Payment Services Directive (PSD2).

In the course of the new EU PSD2 Directive we will change the process of Sofortüberweisung in order to make it even more safe and secure. In doing so, Sofortüberweisung will implement a second step of authentification, the so-called second factor, which can be different depending on the main bank. Learn more here.



Sofort is one of the safest online payment systems on the Internet. How so? Because with Sofort, your customers make payments using their own familiar online banking details. In this way, security and privacy are our highest priority.

  • No storage of confidential data (such as PIN and TAN).
  • Sofort GmbH has been awarded the seal “Approved Data Protection” and Sofort the certificate “Approved Payment System” by TÜV Saarland.
  • In addition, our information security management system (ISMS) has been certified according to ISO 27001 by TÜV Süd.


Approved payment system

Verified data protection

ISO 27001 certified

The audit requirements for the TÜV Saarland certificates are accessible on TÜV Saarland’s website at

Do you have questions regarding the security of Sofort?

Frequently asked questions

How secure is Sofort?

In all financial matters, security must be the top priority. That's why we developed Sofort as one of the safest payment systems available on the Internet – because with Sofort, your customers use the classic online banking procedure of their bank. The confirmation code (TAN) in particular offers excellent protection from misuse since it can be used only time and then immediately becomes invalid. Entry of online banking details, like PIN and TAN, occurs entirely in the secure Sofort GmbH payment form and not on the merchant's website. Transmission of information occurs only via connections secured with up to AES 256Bit. Sofort GmbH itself does not store any sensitive information, such as PIN and TAN, and simply carries out the transaction as a technical service provider. At no time are online banking details, like PIN and TAN, visible to third parties or employees of Sofort GmbH. To ensure the security of customer information at all times, we don't just rely on our own expertise. TÜV Saarland regularly evaluates and certifies our procedures.

Read more Close

Are chargebacks possible?

Chargebacks are not possible with Sofort. As this is not a direct debit, but a direct, automated transfer. For this reason, default on payments is very rare.

Does Sofort GmbH store the online banking login details of customers such as PIN and the TAN?

Online banking details such as PIN and TAN are not stored and are never visible to third parties or the employees of Sofort GmbH. Compliance with data privacy guidelines is regularly tested and certified by TÜV Saarland in accordance with the strict guidelines of federal German data-protection law.

Read more Close