Per-client method policy
Payment types are enabled per client, by contract.
Each paymentType (card, eft, qr, mpesa, airtel_money, orange_money, tigo_money, mtn_momo, apple_pay, google_pay, samsung_pay) can be enabled or disabled per client and environment. By default a paymentType is allowed; a stored policy can disable it.
If a client attempts a disabled paymentType, confirmation is rejected with payment_type_not_enabled. Review what's enabled for your account on the Payment methods tab of the Developer portal.
Baraka Pay staff change policy through the Admin console; every change is recorded in an append-only audit log with the operator's identity and a reason.