Sabritas interview question

HOw would you implement a payment auth?