Frequently asked questions

Questions from organisations using Vipps MobilePay through Flimmer, Antiform's platform. Companion to the guide, which covers the application and configuration steps in order.

Platform mechanics and your agreement are different things. This page describes how the platform behaves. What your members are charged, who pays it, what your membership terms say, and what Antiform charges you are commercial matters settled per organisation — they are not platform settings, and nothing here should be read as stating yours.

Getting started

Can we add Vipps to our existing website?

No. Vipps through Antiform is available to organisations whose website runs on Flimmer, our platform. Antiform builds and operates a custom website for each organisation and integrates Vipps into it; we do not add Vipps login or membership payments to a site built and hosted elsewhere. If your organisation is not on Flimmer yet, the platform engagement comes first — this page assumes it.

Do we need developers, or a technical person?

No. Antiform is a registered Vipps Platform Partner and builds the site as well as doing all integration, development and maintenance. Your part is the product order, two branding decisions — company name and logo — and telling us if the domain your directory runs on changes.

How long does the Vipps part take?

Once you are on Flimmer, the Vipps track is short: Vipps' KYC and AML review is typically 5–15 business days, and Antiform's configuration work is one to two days once your sales unit exists. Call it one to three weeks, almost all of it Vipps' review rather than our work.

So how long until we are live?

Longer, and the Vipps track is not what decides it. Your directory is a custom frontend that Antiform designs and builds for you, scoped and scheduled as part of your platform engagement — it is a project, not a signup. The Vipps onboarding above runs alongside that build and is rarely the critical path. Ask us for a timeline for the whole engagement rather than reading one off this page.

What do we need before we can apply?

Your organisasjonsnummer, a Vipps business portal account or the authority to create one, a bank account in the organisation's name, and the company name and logo members should see.

Can we start on Login and add membership payments later?

Not on the same sales unit, and this one is worth getting right the first time. A sales unit ordered specifically for Login is permanently Login-only — Vipps cannot add a payment solution to it afterwards, and it cannot be converted. If you expect to collect membership fees at any point, order the payment (ecom) sales unit first and activate Login on it. That leaves you with one sales unit, one Merchant Serial Number and one set of API keys covering both products. Starting Login-only means a second sales unit later, a second set of keys, and another KYC-paced wait.

Money

Does Antiform ever hold our money?

No. Funds settle from Vipps directly to your organisation's bank account. Antiform initiates payments against your sales unit and is never a party to the settlement. This is a structural property of the Vipps partner model, not a policy we could change.

Who is the merchant of record?

Your organisation. The sales unit is registered to you, KYC is run on you, and the money is yours.

What does this cost?

Vipps' own fees are set in your product order and are between your organisation and Vipps.

Antiform's own charges are whatever your agreement with Antiform says. There is no single platform price model: what is charged, how it is measured, and who pays — the member, or your organisation on their behalf — are commercial terms agreed per organisation, not properties of the platform. This page cannot tell you what yours are.

Credentials and security

Who holds the Vipps API keys?

Antiform. As a platform partner we hold partner credentials centrally and use them to act against your sales unit. You never receive, store, or rotate a Vipps API key, which means there is no key for your organisation to leak or lose.

Where are they kept?

In a managed secrets store, resolved at request time and never written into configuration files, deployment scripts, or source control.

Can we use our own API keys instead?

You can supply your own sales-unit keys, but they are still held in Antiform's secrets store and rotated by Antiform. The platform resolves every credential from that store at request time; it cannot read a key kept anywhere else, and Antiform does not hand rotation of a live credential to another party. So the choice is which keys the platform uses, not who holds them. Raise it before the product order, since it changes how the sales unit is set up.

What member data does Antiform see?

The identity claims your login requests — name, phone number, and email — plus which member holds which mandate and the state and amount of their charges. Antiform never sees card numbers, bank credentials, or the rest of what Vipps holds about a member.

Why does the login ask for email?

Because the product uses it. Member enquiries are relayed by email, and it is how the platform tells a member about their membership — status changes, a failed charge, a suspension. The address that arrives from Vipps is not treated as verified on its own; members confirm it separately before it is used as a verified contact address.

Running it

A member says the Vipps login does not work. What do we do?

Tell Antiform, with the member's phone number and roughly when they tried. Most reports are a cancelled login in the Vipps app, which returns the member to a page explaining what happened and offering another attempt.

Can a member cancel their membership mandate in the Vipps app?

Yes, at any time, and Vipps does not require our permission. Any cancellation flow offered on your own site is in addition to the Vipps app, never a replacement for it.

What happens when a member cancels — do they lose access immediately?

Not under the platform's current behaviour. The Vipps agreement stops immediately, but the membership stays active and visible until the end of the period already paid for, at which point a daily sweep marks it lapsed. A member who cancels before their mandate was ever activated clears at once, since there is no paid period to honour. The same applies if Vipps cancels from their side.

This is how the platform behaves for every organisation on it — it is not a per-organisation setting. If your membership terms need to work differently, raise it early: that is a change to the platform, not a switch we can flip for you.

We are changing the domain our directory runs on. Does anything break?

Yes, if we are not told first. The login redirect URI and the payment webhook URL are both registered with Vipps against your exact hostname. Both must be re-registered before the change, or logins and membership charges will fail. Tell Antiform ahead of the switch.

What happens if a charge fails?

The failure is recorded against the membership, your administrators are notified, and the membership is flagged for follow-up. After a set number of consecutive failures it is suspended rather than charged indefinitely. Vipps keeps trying a failed charge for seven days before it counts as failed.

That threshold is configured once for the whole platform, not per organisation, so it is not currently yours to set. Chasing the member is: the platform surfaces the problem and stops charging, it does not resolve it.

What happens when we change a fee?

Every member whose price changes is emailed their old and new price and the date it applies, and their Vipps agreement is updated to match. They do not approve it again. You set prices, campaigns and single-member reductions yourself, in your admin under membership settings.

Can we refund a member?

Ask Antiform. We refund in full or in part, and the money goes back to the member through Vipps. Refunds are not in your own admin today.

Could a member be charged twice by mistake?

No. Every charge attempt carries an idempotency key, so a retry after a network failure cannot produce a second charge.

How do we reconcile, and how does Antiform bill us?

Vipps settles directly to your bank account, and the platform records every charge it raises and whether it succeeded — that record is what reconciliation runs on. Members see each charge in their own Vipps app, labelled with the product name and description; the platform does not issue separate PDF receipts.

How Antiform then bills your organisation follows your agreement, not a platform rule. Any invoice is between Antiform and you; members never see it.

Support

Who do we contact?

Antiform first, for anything Vipps-related. Antiform is your first line and escalates to Vipps MobilePay as second line where needed. Going to Vipps directly generally routes back to us and costs a round trip. The exception is the KYC decision on your product order: that is between Vipps and your organisation, and Antiform cannot see the reasoning or appeal it.

How do we reach Antiform, and how quickly do you respond?

support@antiform.as for anything Vipps- or platform-related, hei@antiform.as for general enquiries. A reply typically comes within one business day — that is what usually happens rather than a committed service level, as Antiform is a small team. If something is affecting your members right now, say so in the subject line and it goes to the front of the queue.

Our product order was rejected. What now?

Vipps contacts your organisation directly with the reason. Antiform is not told why. Once you have resolved whatever Vipps raised, a new product order can be submitted through the same template link.