Coshine

Card issuing & acquiring processor

Run issuing, acquiring and 3DS on one processor — certified across the world's major card networks.

Coshine consolidates card issuing, acquiring, 3-D Secure, payment gateway and merchant operations onto a single platform — pre-certified across Visa, Mastercard, UnionPay, JCB, Discover and Amex, in production with 150+ banks, PSPs and fintechs across 10+ markets globally.

BankCore / issuerWalletTop-up / payoutFinTechCard programsMerchantAcceptanceCOSHINEPAYMENT PROCESSORISSUING3DSGATEWAYVisaMastercardUnionPayAUTHORIZATION200 OK · 2.18 mstx_4f9a3bSETTLEMENTMC net file · cleared
In production payment processing
20+ yrs
Banks, PSPs and fintechs served
150+
Production uptime (rolling 24 months)
99.995%
Markets served globally
10+

Certified and in production across these card networks

  • Visa
  • Mastercard
  • JCB
  • UnionPay
  • American Express
  • Discover
  • Diners Club

Security & Compliance

Audit-ready, by design and by certification.

PCI DSS Level 1, PCI 3DS, PCI PIN, ISO/IEC 27001 and MLPS Level 3 — independently re-certified every year. Audit artifacts available to qualified buyers under NDA.

  • Encryption & key management

    TLS 1.2+ in transit, AES-256 at rest, HSM-backed key custody with documented rotation.

  • Access & audit

    Role-based access control, multi-factor on privileged paths, tamper-evident centralized audit trail.

  • Monitoring & response

    24×7 monitoring with SLA-defined incident response, vulnerability management and independent penetration testing.

Programs & standards

  • PCI DSS Level 1
  • PCI 3DS
  • PCI PIN
  • ISO/IEC 27001
  • MLPS Level 3
  • Independent annual audits

Five modules, one processing platform.

Issuing, acquiring, 3D Secure, gateway and merchant operations on a single processor — pick what you need or take it end-to-end.

Cardholderapply / useIssuerCoshineSchemeV · MC · UPIMerchantacceptance

01

Card Issuing Processing

Credit, debit, prepaid and virtual card issuing on one rail — across the full card lifecycle.

  • Credit, debit, prepaid and virtual card programs
  • Full lifecycle: open, activate, freeze, replace, close
  • Authorization, clearing, billing, settlement, disputes
MerchantPOS / webAcquirerCoshineSchemerouteIssuerapprove

02

Acquiring Processing

Accept payments across online, POS, QR and mobile — with routing, settlement and reconciliation built in.

  • Online, POS, QR and mobile acquiring channels
  • Merchant onboarding and transaction routing
  • Authorization, clearing, settlement, reconciliation
MerchantcheckoutDSdirectoryACSCoshineIssuerrisk engine

03

3D Secure / ACS

EMV 3-D Secure with risk-based authentication — for issuers and merchants alike.

  • EMV 3-D Secure ACS, certified deployment
  • Risk-based authentication with tunable rules
  • Frictionless, OOB and challenge flows
UNIFIED APIPOST/payments/authorizationsPOST/cardsPOST/3ds/authenticationGET/transactions/{id}200 OK · signed

04

Payment Gateway

Unified API for payment acceptance — routing, tokenization, monitoring and reconciliation.

  • Single API across schemes and local methods
  • Routing, tokenization and signed webhooks
  • Cross-border and local payment scenarios
MERCHANT CONSOLETRANSACTIONS12.4KSETTLEMENTOKDISPUTES3AUTH RATE98.7%NET VOLUME$2.1MAVG TX$48

05

Merchant Portal

Operations console for merchant management, transactions, settlement and disputes.

  • Merchant onboarding and program management
  • Transaction inquiry and authentication analytics
  • Dispute and chargeback workflows

Platform

Engineered to the standards bank auditors actually use.

One processing platform connecting your clients to card schemes and core systems — designed for HA, deep integration and the audit artifacts your second-line risk function will ask for.

  • Scheme connectivity

    Visa, Mastercard, UnionPay, JCB, Discover, Amex and selected local networks — subject to project scope and certification.

  • Deployment model

    Private, public and hybrid — choice driven by data residency, regulator expectation and the client's existing vendor estate.

  • Operational reliability

    Active-active HA, documented DR with RTO/RPO targets, 24×7 monitoring and SLA-defined incident response — for batch and online processing.

  • Integration friendly

    APIs, ISO 8583, batch, SFTP, MQ and host-to-host — into core banking, card management, wallet, fraud, CRM and finance systems.

API · SFTP · MQISO 8583 · BATCH · H2HCLIENTSBanksWalletsMerchantsFinTechsPayment InstitutionsCOSHINEPayment Processing PlatformIssuing ProcessingAcquiring Processing3D Secure / ACSPayment GatewayMerchant PortalRisk & MonitoringClearing & SettlementReconciliationHA · DR · 24×7 MONITORING · INDEPENDENT AUDITSCHEMES & CORECard SchemesCore BankingFraud SystemCRMFinance / GLData WarehouseRegulatory

Reference architecture — clients on the left, the Coshine processor in the middle, card schemes and core systems on the right.

Selected engagements

Selected production engagements.

Anonymized at client request. Reference calls available under NDA for qualified buyers.

  • Hong Kong

    Digital wallet · Acquiring + 3DS

    Enabled online card-not-present acceptance with 3-D Secure across a multi-million-user wallet. Issuer-side authentication approval rates improved measurably post-deployment; production cutover completed without merchant-facing outage.

  • Southeast Asia

    Tier-1 universal bank · Issuing + acquiring consolidation

    Migrated a multi-million card portfolio and the bank's acquiring book onto a single Coshine processor, decommissioning three incumbent vendors. Post-migration P0 incidents: zero in the first 12 months.

  • Greater China

    Payment institution · Cross-border processing

    Connected cross-border acquiring with local clearing, supporting multi-currency authorization and scheme-file reconciliation. In production across multiple corridors.

Built for developers.

Sandbox keys in five minutes. Clean REST, signed requests, real webhooks.

Issue a virtual card
POST /v1/cards
curl -X POST https://api.coshine.com/v1/cards \
  -H "Authorization: Bearer $COSHINE_TOKEN" \
  -H "X-Timestamp: 1716275000" \
  -H "Content-Type: application/json" \
  -d '{
    "type": "virtual",
    "currency": "SGD",
    "cardholder_ref": "cust_4f9a"
  }'

Considering a processor change, or launching a new card program?