Unlimit: payment processing, business accounts and embedded payments

Unlimit supplies payment acceptance, business-payment operations and embedded financial infrastructure. Its current partnership programme addresses financial institutions, payment service providers, acquirers and technology platforms, with FX among the enquiry categories. For a brokerage, the practical roles are funding and withdrawal routes, corporate treasury and an embedded account or card programme. Those are separate commercial arrangements; a partnership enquiry is not approval to process a particular broker’s client deposits.[8]

The embedded-account offering describes IBANs, BICs, account numbers and sort codes, alongside REST APIs and digital identity checks. Its purpose is to let a platform build a customer-facing account experience. The service programme, available identifiers and regulatory relationship have to fit the customer population and territory; a provider’s programme permissions do not become an independent banking licence for its client.[5]

The BaaS use cases explicitly include financial-service firms adding debit or prepaid cards to an existing offering. Unlimit also describes a fintech sandbox for testing and changing a proposed programme before launch, with project-specific commercial planning as it grows. This is a more specific integration route than the generic promise of a rapid merchant onboarding.[6]

The official API v3 repositories expose a REST/JSON integration. The PHP SDK authenticates with a terminal code and password and manages access and refresh tokens. Its default token storage uses temporary files, but the TokensStorageApi interface allows another store, including an application session or database. Credential and token handling therefore remains part of the merchant’s integration design.[9]

The Python example separates payment creation from checking the result: create_payment returns a payment identifier and redirect URL, while get_payment retrieves the payment state. A checkout return page and the recorded payment status serve different purposes. The example uses the sandbox host; production configuration is a separate deployment step.[10]

The public developer organisation still uses the cardpay GitHub name and identifies itself as Unlimit. It publishes Java, Python and PHP v3 SDKs, alongside mobile and e-commerce repositories. Repository names are useful for locating the correct integration family; they should not be confused with a different contracting company.[31]

Pricing combines negotiated payment-processing arrangements with published account schedules. Unlimit’s own Brazil payments overview describes its merchant pricing there as quote-based. That market-specific statement does not supply a universal acquiring percentage, chargeback charge or settlement rate.[28]

The currently linked EU corporate account and corporate card schedules take effect from 1 July 2024. Individual, freelance and named partner programmes have separate documents.[17]

The UK account site separately links corporate fees effective 17 March 2025 and e-money terms effective 12 March 2025. The examples below concern corporate account services, not merchant-acquiring commissions.[18]

The EU schedule allows assessment-based variations. Non-payment charges include VAT. T+1 means the recipient bank’s next working day after order processing, not final beneficiary credit; after-cut-off orders move to the next business day.[13]

The UK schedule also allows assessment-based pricing; non-payment charges exclude applicable VAT. T+1 is the recipient bank’s next working day after processing. UK cut-offs adjust for British Summer Time.[14]

Both card schedules list free monthly maintenance and card purchases. Foreign-currency card transactions use the card scheme’s conversion rate plus 1.5%, applied when the scheme processes the transaction; that date can differ from the purchase date.[15][16]

Unlimit’s India merchant agreement illustrates how approval is tied to the actual business: the applicant must disclose its precise purpose, pass KYC and obtain Unlimit and partner-institution acceptance. A new purpose requires prior written approval. Its agreed MSA contains the service fees, with changes notified in advance. These are India-specific merchant conditions.[21]

EU account terms permit customer-set authorised-user rights and limits within available functionality. The customer remains responsible for those users.[19]

The WooCommerce implementation distinguishes sandbox and production settings. Its capture and void flow is documented for credit cards when automatic capture is disabled. Online refunds are listed for cards, Apple Pay, Google Pay, MB WAY and PayPal; other plugin methods require a manual refund outside that flow. These are plugin controls, not universal API restrictions.[12]

For an embedded programme, Unlimit’s added services include electronic KYC, AML and fraud monitoring, front-line customer support and professional support. These can support the programme operator’s workflow, but the advertised menu does not itself specify which party owns each investigation, customer interaction or operational decision in an individual programme.[7]

Payout scheduling and batching can organise outgoing payments independently of collection. The current product page includes bank transfers, cards, wallets and SEPA Instant among its routes. The selected rail and enabled market determine how a particular withdrawal is delivered; the general “instant” positioning is not a uniform end-beneficiary receipt commitment.[2]

The processing offer describes dedicated technical and support managers. Account enquiries have a separate support form, with customer-type and company details. Neither page supplies a numerical contractual incident-response or restoration deadline.[1][24]

The Central Bank of Cyprus register dated 12 October 2026 lists Unlimit EU Ltd, company HE328641, under licence 115.1.3.7/2018. Its entry covers issuing, distributing and redeeming electronic money and listed payment services, with freedom to provide services across the EU, Iceland, Liechtenstein and Norway. The register also records its former Unlimint EU Ltd and CardPay Limited names.[29]

Unlimit’s UK disclosure identifies Unlimit UK Ltd and states FCA electronic-money authorisation under reference 978706. This is the company’s published regulatory statement; the full FCA permission record did not load for independent inspection. It concerns e-money and payments, not an investment-firm permission for a brokerage customer.[8]

EU account balances are not deposits and lack deposit-guarantee cover. The account must not be used as a currency-exchange platform; Unlimit can restrict, suspend or close it and reclaim gains from misuse.[19]

UK account terms credit merchant settlement as e-money on the Merchant Agreement’s settlement date. Safeguarding uses dedicated client-money bank accounts for e-money holders, without FSCS cover. For other payment methods it begins on actual receipt, and applies in any case when more than five business days have elapsed after e-money issuance.[20]

India has an expressly different eligibility boundary. Its banned-category list includes securities and government-bond products, wholesale currency and currency exchanges, cryptocurrencies and NFTs, money transfers and certain non-financial account-funding transactions. The list belongs to Unlimint IN Private Limited, not every Unlimit jurisdiction. A broker cannot infer acceptance of its funding model from the group’s general payment capabilities.[22]

The business traces its start to 2009. Its May 2023 announcement changed the Unlimint brand to Unlimit and described a London-based international payments company.[27]

The company’s own current payments overview identifies the earlier Cardpay name and the November 2020 change to Unlimint. These names remain relevant when locating older agreements or the current developer repositories.[28]

Companies House separately records Unlimit UK Ltd as active, incorporated on 15 June 2022 under number 14173267, with the former name Unlimint UK Ltd lasting until 24 January 2024. The UK corporate incorporation date therefore differs from the group’s operating history.[30]

The account website’s current navigation directs its crypto link to Stable.com. The Cyprus register also lists STABLE COM as a commercial name of Unlimit EU Ltd. A shared brand or legal entity does not make every stablecoin, business-account and merchant-processing product one interchangeable contract.[17][29]

Operator

Unlimit EU Ltd, Unlimit UK Ltd or the applicable regional contracting entity

Service scope

Merchant payment acceptance, payouts, business accounts, expense cards and embedded payment infrastructure.

Customer types

Merchants; Financial institutions; Payment service providers; Fintech platforms; Corporate account customers

Delivery

API; Hosted; Managed service

Pricing publication

Public and quoted pricing

Platforms

Payment processing; Payouts; Unlimit Accounts; Unlimit BaaS

Implementation

Entity and business-purpose approval, account or programme onboarding, API or checkout configuration and sandbox integration.

Support

Dedicated processing contacts, account support form, developer email and entity-specific formal complaints.

Permissions and regulatory scope

Entity-specific e-money and payment permissions; merchant acceptance and account use remain subject to product and sector restrictions.

Provider metadata checked 20 Oct 2026Source 3Source 4Source 7Source 6Source 28Source 29Source 17Source 31Source 22Source 8Source 1Source 2Source 11Source 24Source 30

EU statements are available free monthly in a durable electronic format. Save them; older user-interface history may require a request.[19]

EU closure follows written notice and normally completes within 30 days after receipt, subject to different additional terms. Liabilities survive. Normal company notice is two months, but corporate customers can receive shorter or immediate notice.[19]

India’s merchant agreement permits ordinary termination on 30 days’ written notice. It allows reserves and settlement amounts to be held for 210 days to cover continuing chargeback, refund and other liabilities. That period does not apply to specified holds for breach, fraud, suspicious activity or other listed misconduct; it is not a guaranteed final release date.[21]

The group’s Responsible AI Notice describes internal staff use of third-party tools for document work, routing, fraud/security tasks and support. It says the group does not develop or train its own models for these purposes. Human review and approval apply to externally sent drafts. This documents internal operational assistance, not an autonomous customer payment-execution product.[26]

Separately, the EU privacy notice permits automated fraud assessments that can lead to stopping account activity, blocking a payment instrument or refusing access. These are documented fraud-control actions, distinct from the internal drafting tools.[25]