Comment by hirako2000

In fact a unique payment ID (e.g QR) to "push" payment is even safer. No redirect. That's how payment should be. Not an authorization given to pull from us, but the agency for us to push the amount.