The summer season is in full swing, but the non-hotel and hospitality sectors are facing a regulatory upheaval that threatens to wipe out cancellation fee revenues. The final crackdown on digital transactions in tourism – a direct evolution of the European directive PSD2 and PSD3/PSR at the gates – it is now a reality.
From this fall, the old methods of manual pre-authorization or, worse, the habit of transcribing the guest's credit card details on a piece of paper (or in the management system without protection) they will no longer be transactable or legally protected.
If you manage a hotel, B&B, or vacation rental and don't comply immediately, you risk losing the funds from deposits and no-shows for bookings in August, September, and beyond. Here's a practical guide to securing your cash flow.
What changes now for your cash register?
Topics index
Old physical POS terminals and manual credit card entries violate European regulations (SCA/PSD2). Banks will reject manual chargeback attempts for no-shows, risking the loss of 100% of late cancellation fees and deposits.
The solution would be to immediately move on to tokenization payments via Payment Gateways integrated into the PMS or by sending protected payment links.
Why the old "piece of paper" is financial suicide today
Until yesterday, many small hosts and hoteliers managed direct bookings by requesting card details via email, telephone or via portals, then manually entering them into the POS (procedure Key-in o MOTO).
Today, with the rigorous application of the Strong Customer Authentication (SCA), every online transaction requires double authentication by the customer (e.g. notification on the bank app or SMS).
If you attempt to charge a cancellation fee without the guest having previously strongly authorized the transaction, the guest's bank will block the paymentResult? Empty room, no cash, and no legal protection in the event of a chargeback.
The technological tools to adopt immediately
To avoid losing deposits and protect against non-arrivals, it's necessary to digitize the collection process. There are two main solutions:
1. Payment Gateways integrated into the PMS
Your hotel management software (PMS) must be connected to a modern payment gateway (e.g. Stripe, Nexi, PayPlug). When the guest books, the system does not "read" the card in clear text, but the tokenize.
What is Tokenization? It's a process that replaces sensitive credit card data with a unique encrypted code (the token). This allows for automatic and legal penalties to be applied in the event of a no-show, without violating GDPR and PSD2 regulations.
2. Secure Payment Links (Pay-by-Link)
For reservations by phone, email, or WhatsApp, never ask for your card details again. Send a payment linkThe customer clicks, is redirected to a secure bank page, enters their details, and authorizes the transaction via their banking app. You receive instant confirmation, and the payment is 100% guaranteed.
Comparison table: Old methods vs. compliant digital solutions
| Functionality / Risk | Paper on sheet / Manual POS | Payment Link (Pay-by-Link) | Integrated Gateway (PMS + Tokenization) |
| PSD2 / SCA Compliance | ❌ No (Outlaw) | Yes | Yes |
| Chargeback risk | ⚠️ Very High | ❌ Zero (SCA Guaranteed) | ❌ Zero (SCA Guaranteed) |
| Quick No-Show Management | ❌ Impossible / Blocked | ⚠️ Only if cashed in advance | Yes, automatically via token |
| User experience | ❌ Poor (Lack of confidence) | Good and fast | Excellent (Invisible to the customer) |
| Data Security (GDPR) | ❌ Very heavy sanctions | Guaranteed by the bank | Maximum (Encrypted data) |
3 steps to upgrade your facility today
Contact your PMS / Channel Manager provider: Request immediate activation of a certified payment gateway (Stripe, Nexi, PayPal, etc.).
Update cancellation terms: Specify on your website and in confirmation emails that payments and guarantees are processed through secure, SCA-compliant channels.
Train the Staff: It strictly prohibits anyone working at the reception desk from transcribing customers' credit card details onto unprotected paper or digital media.
Remember not to enter card numbers manually on the physical POS (offline procedure)—it's no longer protected. If the customer disputes the penalty charge, the bank will always rule in their favor.
If the card was tokenized and validated at the time of booking using SCA criteria, you can charge the applicable penalty directly from your management system. The transaction is legal and undisputable.
Payment gateways take a small percentage of the transaction (typically between 1% and 2.5%). This is a negligible amount compared to the risk of losing the entire amount of a booking in August.
Old manual debit methods are no longer protected due to the European crackdown on digital transactions. To understand how the new security standards work, you can consult the Bank of Italy guidelines according to transparency provisions
Stay ahead of the curve with regulatory and marketing updates for your non-hotel or hotel business.
[Subscribe to the newsletter of Direzione Hotel] to receive weekly strategic updates and essential tools for your business success.
