Online Security Deposit Solution for Luxury Car Rental

A deposit worth several thousand euros is not handled like a booking fee. For a luxury or premium car rental company, or one that rents out cars on behalf of their owners, the real question is how to take it: at the counter with a card terminal, or online before the customer even arrives. This guide compares the mechanisms, using Stripe's official documentation, then reviews the options on the market.

It is written for rental professionals. For the basics (deposit, security deposit, insurance excess), start with our guide to the car rental security deposit.

Card hold or upfront charge: what happens on the card

A "card hold" is, technically, an authorisation without capture: the customer's bank sets the amount aside on the card, but no money moves until the rental company triggers the capture. Three rules follow from Stripe's documentation:

Capture must happen before the authorisation expires. After that, the hold is released and the payment is cancelled: the deposit no longer exists.
A partial capture releases the rest. Keep €800 out of a €5,000 hold and the remaining €4,200 is released automatically. For most payments only one capture is allowed: you cannot come back for the difference later.
The customer's statement can mislead. Some issuers show no difference between an authorisation and a settled payment. Tell the customer before they notice.

An upfront charge, by contrast, actually debits the customer and requires a refund on return.

Counter terminal or online deposit

At the counter, the hold is placed on a terminal with the card in hand. It concentrates the risk at the worst moment: a declined card or an insufficient limit surfaces with the customer in front of you and the car ready to leave. With Stripe, a terminal authorisation is also shorter: 2 days for Mastercard, American Express and Discover, 5 days for Visa.

Online, the customer receives a link at booking or before pick-up, enters the card and authenticates with their bank. A decline shows up the day before, not in the car park. For an online payment initiated by the customer, the standard authorisation window is 7 days on the main networks.

Large amounts: card limits and 3-D Secure

A hold sets real funds aside: for as long as it lasts, it uses part of the customer's card limit. On a deposit of €5,000 or more, warn the customer at booking, especially if they plan to use the same card during their stay.

In the European Union, the Payment Services Directive (PSD2) requires strong customer authentication when the payer initiates an electronic payment (Article 97). For cards, Stripe states that 3-D Secure is the method used to meet that requirement. A payment authenticated with 3-D Secure generally shifts liability to the issuing bank if it is disputed as fraud, but Stripe stresses that the liability shift is never guaranteed for a given payment or dispute.

How long a card hold stays valid

For an online payment, Stripe lists a validity of 7 days for Visa, Mastercard, American Express and Discover when the payment is initiated by the customer. A merchant-initiated Visa authorisation lasts only 5 days, in practice 4 days and 18 hours.

Stripe also offers extended authorisations of up to 30 days, depending on the network. Vehicle rental is an eligible category for Visa, American Express and Discover, while Mastercard opens it to all categories. Three caveats: the feature is offered to accounts on IC+ pricing; many networks reserve it for cases where the final amount is unknown at authorisation; and with American Express, capture must happen by the end of the rental at the latest. For each payment, the capture_before field gives the actual deadline.

A practical rule: if the time between placing the hold and the return exceeds the validity window, place the hold at key handover rather than at booking, or plan a new hold with the customer.

Disputes: what a card hold changes

As long as it is not captured, an authorisation cannot be disputed: according to Stripe, cardholders can only dispute captured payments. A deposit released without any deduction therefore carries no dispute risk.

As soon as you keep an amount, it becomes a payment like any other. Card networks generally let customers dispute it within 120 days; you then have 7 to 21 days, depending on the network, to respond with evidence, and the disputed amount plus the dispute fee is taken from your balance while the case runs. The decision lies with the customer's bank, not with Stripe.

A solid file rests on three documents: the signed rental agreement setting out the grounds for deductions, the condition report with photos at pick-up and return, and a written breakdown: our guide to charging damage and the excess to the renter sets out the procedure. Add a recognisable statement descriptor, which Stripe recommends to avoid disputes over payments customers do not recognise.

The options on the market

A counter terminal with a manual hold: simple, but tied to the customer's physical presence and to the shortest authorisation windows.
Specialised online deposit services. Swikly, for example, sends a deposit request by link. According to its website, the customer saves a card and authorises a debit for the amount and period you set, from a few hours to several months; the deposit is "neither debited nor held" on the customer's account or card, leaves the card limit untouched, is cleared automatically at the end of the rental, and you can claim all or part of it. Swikly offers a Guarantee option in case of payment default and connects to rental management software.
A deposit built into the rental management software, placed from the rental file itself, with no separate tool.

Two questions settle the choice: do you want funds set aside from the start, or an authorisation to debit without a hold? And should the deposit live in the same file as the agreement and the condition report, or in a separate tool?

How Corsiva OS takes the deposit

Corsiva OS is built by a team that runs its own premium fleet. The deposit is one step of the rental file:

Stripe card hold placed online, at the latest at key handover: the customer receives a secure link and validates the hold with 3-D Secure from their phone. The amount is held, not charged. Payments are processed by Stripe; Corsiva stores no card data.
Released on return in one click, or partially captured if damage is found.
No card terminal: everything is done from the OS, on mobile or at the counter.
Your own payment account: the agency's Stripe account is opened from within the OS (Stripe Connect), Stripe handles the business verification, and payments are created directly on that account.
Key handover blocked until everything is green: rental paid, deposit authorised, documents checked, agreement signed.

Deposit collection is included from the Business plan, at €98 excl. VAT per month with a one-year commitment (€117 without commitment), along with damage tracking. Details are on the pricing page, and you can start a free trial on your own rentals. For the checks to run on the customer before pick-up, see our guide to luxury car rental fraud; to align the deposit with what your insurer leaves you to fund, see our guide to car rental fleet insurance. The interface is available in French, English, German, Spanish and Italian.

Frequently asked questions

What is the difference between a card hold and charging the deposit?

A hold sets the funds aside on the card without debiting them; only a deduction becomes a payment. Charging the deposit debits the customer and requires a refund on return.

How long does an online card hold last?

According to Stripe, 7 days for a customer-initiated online payment on Visa, Mastercard, American Express and Discover, and 5 days for a merchant-initiated Visa authorisation. Extended authorisations of up to 30 days exist for vehicle rental, under conditions.

Can I capture only part of the deposit?

Yes. A partial capture automatically releases the rest. For most payments only one capture is possible, so assess the damage before capturing.

Can the customer dispute a deposit?

An uncaptured authorisation cannot be disputed. A deducted amount can, generally within 120 days: the signed agreement, the condition report with photos and a written breakdown are your defence.

Do I need a card terminal to take a deposit?

No. The hold can be placed online, by link, with 3-D Secure authentication. In Corsiva OS it is placed from the OS without a terminal, and it is included from the Business plan.

Online security deposit solution for luxury car rental: card holds, validity and disputes