Wio Bank has switched on a Click to Pay solution across its cards, becoming the first issuer in the UAE to auto-enable Mastercard’s online checkout solution for eligible cardholders. The change means a customer paying on a participating website no longer fills in a long card number, an expiry date, and a security code. One click completes the purchase. For a bank built around digital banking, the step fits a wider effort to shorten everyday transactions and take friction out of online spending. It also arrives as more of the country’s retail activity moves to screens, where speed and trust at the final step decide whether a sale closes.
What auto-enablement changes for customers
Auto-enablement is the detail that sets this apart. Rather than asking each customer to register a card and opt in, Wio turns the feature on by default for cards that qualify. Shoppers meet the option at checkout without any setup of their own. That design choice lowers the usual barrier to adoption, where a useful tool sits unused because few people take the step to activate it.
Prateek Vahie, Chief Commercial Officer at Wio Bank, said the bank wants to bring efficiency into daily transactions and offer streamlined, user-friendly payment journeys powered by Mastercard’s technology. The practical result is narrow but real. A customer finishes a purchase faster, and the bank gains a smoother path for the online spending that now drives much of UAE digital payments.
- Sharjah Islamic Bank raised US$500 million through a five-year Sukuk.
- The order book reached US$1.3 billion, or 2.6 times the issue size.
- Pricing landed at a 5.85 percent yield, 105 basis points over five-year US Treasuries.
- The deal was the bank’s 13th Sukuk since it entered capital markets in 2006.
- BANKING
How the Click to Pay solution works
The Click to Pay solution rests on two ideas that work together. First comes network tokenization. Instead of passing the real card number to a merchant, the system swaps it for a unique digital token, so the sensitive details never sit on the retailer’s systems. The second idea is a shared standard. Click to Pay is built on EMVCo authentication standards, which means it is designed to behave the same way across different cards, devices, browsers, and a growing set of merchants.
A shopper does not need a separate wallet tied to one phone or operating system. The token represents the card, the standard governs how the token is checked, and the purchase clears without the card data changing hands in the open. That consistency is part of the appeal, because a payment method that works everywhere is one a customer will actually reach for.
Security moves from passwords to biometrics
Security is where the service makes its clearest claim. Each payment can be confirmed through the Mastercard Payment Passkey service, which uses device-based biometric authentication such as a fingerprint or facial recognition. The passkey approach removes passwords and one-time passcodes from the flow.
For the shopper, that cuts the wait for a text message and the risk of a mistyped code. For the wider system, it closes a common point of attack. Because the card number is tokenized, intercepted data is of little use to a fraudster, and no financial account details are shared with third parties.
Gina Petersen-Skyrme, Senior Vice President and Country Manager for the UAE and Oman at Mastercard, said the company is working to make online checkout faster, more secure and more intuitive, and that the collaboration with Wio should help lift adoption of online transactions in the country.
Who governs the standards?
Behind the convenience sits a question of governance. Two questions sit underneath: who writes the rules that let a token stand in for a card, and who is accountable when a payment fails, or data is exposed. The answer is layered. EMVCo, the body owned by the major card networks, sets the technical standard. Mastercard operates the tokenization service and the passkey system on top of it. Wio, as the issuer, decides to enable the feature and carries the relationship with the customer.
Each layer holds a defined role, and that division matters as more spending moves online. A standard that works across providers also spreads responsibility, so no single merchant becomes the weak link holding a shopper’s card details. For a regulator and a consumer alike, knowing where each duty rests is worth as much as the speed at checkout.
The road to a tokenized economy
The Wio rollout is one piece of a longer plan. Mastercard has said it is working with partners toward a fully tokenized and authenticated e-commerce system by 2030, a target that would see manual card entry fade from online shopping. Momentum in the region is already visible.
According to Mastercard’s report with Checkout.com, token adoption among merchants in MENA grew by 345 percent, a sign that retailers are moving in the same direction as issuers. For the UAE, which has pushed to expand digital payments and reduce reliance on cash, a passwordless online checkout solution adds to that direction without demanding new habits from the public. The benefit for consumers is measured in seconds saved and codes avoided.
The larger shift is structural. As tokens replace card numbers and biometrics replace passwords, the question of who governs the Click to Pay solution becomes as important as how fast it runs, and Wio’s early move places it among the issuers helping to set that pace.
