Extranet: How to Collect Payments from Your Hotel Bookings
The extranet is the management portal every OTA (Booking.com, Expedia, Airbnb and the other channels) gives your hotel to control rates, availability, reservations and, above all, payments. When you work with the virtual payment model, inside the extranet you find a virtual credit card (VCC) for each reservation: that is the card you have to charge to collect the money from your hotel bookings. The problem is that many hoteliers lack a simple, secure and transparently priced tool to charge those cards — so they end up paying high fees or delaying their payouts. In this guide we explain how the extranet works, how OTA virtual cards are collected, and how RoxPay lets you charge them and settle the funds straight to your IBAN.
What a Hotel Extranet Is
The extranet is the private area each booking portal (OTA) assigns to your property. From the Booking.com, Expedia or other channel extranet you manage your availability calendar, rates, length-of-stay restrictions, guest messaging and — the critical part for cash flow — the payment details of every reservation.
There are two main collection models you encounter in the extranet. In the pay-at-property model the guest pays the hotel directly: the extranet shows you the customer card details (or a linked virtual card) that you charge at check-in or for a no-show. In the online payments / virtual payments model the OTA collects from the guest and generates a virtual credit card (VCC) that appears in the extranet: you charge that card to receive the booking amount, already net of the channel commission.
In both cases, to turn the data you see in the extranet into money in your account you need a tool that can charge those cards. The extranet shows you the number, but it does not collect for you: you need a gateway or a virtual terminal connected to a merchant account. That is where RoxPay comes in.
How to Collect Payments from Your Hotel Bookings with Virtual Cards
A virtual card (VCC, Virtual Credit Card) is a single-use card generated by the OTA for one reservation. Booking.com, Expedia and the other channels make it chargeable from a specific date (usually check-in or check-out day) and for an exact amount, already net of the portal's commission.
To collect payments from your hotel bookings follow this flow: 1) open the reservation in the extranet and check the activation date and the chargeable amount of the virtual card; 2) confirm the card is active (VCCs have a precise time window); 3) enter the card details into your virtual terminal or gateway; 4) run the charge; 5) receive the settlement to your IBAN.
The weak point for many properties is steps 3 and 4: without a proper tool they end up using the old bank POS by keying the numbers in by hand (MOTO), with high fees, or they postpone the charge and risk the card's validity window expiring. With a virtual terminal or a payment link connected to a transparently priced merchant account like RoxPay, you charge the virtual card in seconds — from a PC or smartphone — and collect without depending on bank hours.
Orderly virtual card handling also lets you correctly charge no-shows and cancellations with a penalty, which under non-refundable policies represent a significant share of a hotel's revenue.
Extranet and Channel Manager: the Payment Flow
When you run several OTAs at once you rarely work in a single extranet: you use a channel manager that syncs availability and rates across every portal and often collects the virtual cards of the different reservations in one screen.
The typical flow is: the guest books on an OTA → the reservation enters the channel manager and the extranet → the virtual card is generated (in the online payments model) → at the right moment you charge the card via your gateway → the channel manager or your PMS records the payment → the money reaches your account.
The main risk in this flow is fragmentation: payment data scattered across different extranets, cards that activate on different dates, amounts net of different commissions per channel. To avoid losing revenue it pays to centralise charging on a single tool and to use a merchant reference (reservation number) for each transaction, so reconciliation between extranet, channel manager and accounting becomes automatic.
RoxPay sits as the collection layer: whatever OTA or channel manager you use, you charge the virtual card with the same virtual terminal and receive all settlements on a single IBAN, with consistent reporting. If you also need to collect deposits or balances outside the OTAs (direct bookings, extras, deposits), you can use a payment link generator from the same account.
Charging Virtual Cards (VCC) with RoxPay
RoxPay gives hotels a merchant account with a virtual terminal and payment links designed exactly for the OTA virtual card use case.
Virtual terminal (MOTO): log into the dashboard, enter the card number, expiry and CVV of the VCC you see in the extranet, the chargeable amount and the reservation reference, then confirm the charge. No physical POS needed: you collect from any PC or smartphone, at the front desk or remotely.
IBAN settlement: collected payments are credited to your SEPA account, typically within 24-48 hours, with transparent fees and no hidden charges, so you always know how much you receive from each reservation.
All schemes: OTA-issued virtual cards run on Visa and Mastercard; RoxPay accepts both, plus the main cards and wallets for your direct bookings.
Reconciliation: every charge carries the reservation reference, which you find again in the reports and webhooks, making it immediate to match payouts to extranet or channel manager reservations.
Fast activation: onboarding usually takes 24-48 hours; once the account is live you can start charging virtual cards without complex setup, simply providing the IBAN where you want to receive settlements.
Security, 3D Secure and Reconciliation
Charging virtual cards means handling payment data, so security and compliance are not optional.
PCI DSS: with RoxPay, virtual card data is processed on PCI DSS-compliant infrastructure. Using the virtual terminal or hosted payment links, your property minimises its compliance scope because it never stores raw card data on its own systems.
3D Secure and SCA: OTA virtual cards are normally exempt from Strong Customer Authentication because they are treated as MOTO (Mail Order/Telephone Order) transactions or as commercial card charges. RoxPay handles these flows correctly, applying 3D Secure where required on your direct bookings and using the right channel for VCCs, reducing declines and failed charges.
No-show and cancellation handling: a clear charging procedure lets you collect penalties and no-shows within the virtual card's validity window, recovering revenue that would otherwise be lost.
Accounting reconciliation: by using a consistent reservation reference for each charge, the payments in the RoxPay report match one-to-one with the extranet and channel manager lines. This reduces errors, speeds up your accounting close and gives you a clear view of real revenue per channel, net of OTA commissions.
Frequently Asked Questions
What exactly is a hotel extranet?
The extranet is the private area each OTA (Booking.com, Expedia and others) assigns to your property to manage rates, availability, reservations and payments. In the online payments model, the extranet also contains the virtual card you charge to collect the booking amount.
How do I collect payments from my hotel bookings with virtual cards?
Open the reservation in the extranet, check the virtual card's activation date and amount, then charge it with a virtual terminal or gateway connected to a merchant account. With RoxPay you enter the VCC details in the dashboard, confirm the charge and receive the settlement to your IBAN within 24-48 hours.
Do OTA virtual cards require 3D Secure?
Usually not: virtual cards generated by OTAs are treated as MOTO transactions or commercial card charges, often exempt from Strong Customer Authentication. RoxPay uses the correct channel for VCCs and applies 3D Secure where needed on direct bookings, reducing declines.
You might also like
High Risk Payment Gateway
Secure payment processing for high-risk industries with multi-acquirer routing and chargeback protection.
Small Business Payment Solutions
Transparent IC++ pricing, free Smart POS terminal, and 24-hour activation for small businesses.
E-commerce Payment Integrations
One-click plugins for Shopify, WooCommerce, Magento, and PrestaShop with full API access.
Optimize your payments today
Stop chasing virtual cards across extranets and bank POS terminals: with RoxPay you charge OTA VCCs from a PC or smartphone, settle to your IBAN in 24-48 hours with transparent fees and reconcile every payout with the reservation number.
✓ No monthly fixed costs · ✓ Activation in 24 hours · ✓ Dedicated technical support
