SDK v1.17.45: Better fraud prevention and more reliable payment confirmations

This update improves checkout security and the payment experience with more device context for fraud prevention, more precise validations, and more reliable payment confirmations across QR codes and bank transfers.

More context for card payment fraud prevention

We've improved device information collection to give the antifraud engine more complete context when evaluating each transaction.

The SDK now performs an additional device capture through a hidden iframe, alongside the existing device fingerprint process.

This improvement applies to checkout, renewals, card updates, and saved-card flows that use this fraud screening.

If your account doesn't use this screening, your payment behavior remains unchanged.

More control over the card form

The form where customers enter their card details now loads from a dedicated Rebill domain: sdk-iframe.rebill.com.

This keeps card form hosting within Rebill's infrastructure.

Clearer validations before payment

We've improved full-name validation for customers with previously saved information.

If a first or last name is missing, checkout now displays the error before submitting the payment, preventing unnecessary payment attempts and making corrections easier.

More reliable QR and bank transfer confirmations

When customers leave checkout to complete a payment in their banking app, the SDK temporarily pauses payment status checks.

As soon as they return, the checks automatically resume.

This prevents status checks from being exhausted while the page is in the background and allows checkout to continue verifying payment confirmation.

More consistent checkout rendering

We've optimized icon loading so icons are requested only once per page, with automatic retries if a connection error occurs.

This helps maintain a consistent checkout experience, even on unstable connections.

Before you update

If your site uses a restrictive Content Security Policy (CSP), make sure to allow:

• https://sdk-iframe.rebill.com in the frame-src directive so the card form loads correctly.

• The domains required for device information collection, listed in our Fraud prevention guide.

If your site doesn't restrict these domains, no additional changes are needed.

Update the SDK

All improvements are available by updating the rebill package.

There are no breaking changes or code changes required, although restrictive CSP configurations may need adjustments.

Available in: rebill@1.17.45

npm install rebill@1.17.45