Then the user is redirected to the bank's website, where one can authenticate oneself and then approve the payment. Typically there will also be some form of two-factor authentication. Some services, like Trustly and Smartpay, let merchants embed its iframe on their website so consumers can pay without being redirected away from the original site.