diff --git a/apps/server/src/booth-print.ts b/apps/server/src/booth-print.ts
index 327335c..7c56b31 100644
--- a/apps/server/src/booth-print.ts
+++ b/apps/server/src/booth-print.ts
@@ -1,6 +1,5 @@
 import { eq, ledgerEvents, siteConfig, type Db } from "@parking/db";
 import {
-  formatStampSq,
   printWithFailover,
   registry,
   type PrinterDevice,
@@ -166,26 +165,19 @@ export async function printSubscriptionCard(
  */
 export async function printWindowChargeNotice(
   db: Db,
-  notice: { occurrenceId: string; holderName?: string | null; at: string; windowOpensMin?: number; edge: "entry" | "exit" },
+  notice: { occurrenceId: string; holderName?: string | null; at: string; windowOpensMin?: number | null; edge: "entry" | "exit" },
   logger: FastifyBaseLogger,
 ): Promise<string> {
   const printers = loadPrinters(db);
-  const hhmm = (m?: number) =>
-    m == null ? "" : `${String(Math.floor(m / 60)).padStart(2, "0")}:${String(m % 60).padStart(2, "0")}`;
-  const lines = [
-    `Abonent: ${notice.holderName || "-"}`,
-    `${notice.edge === "entry" ? "Hyrje" : "Dalje"}: ${formatStampSq(notice.at)}`,
-    notice.edge === "entry"
-      ? `Ka hyrë jashtë orarit${notice.windowOpensMin != null ? ` (orari hap ${hhmm(notice.windowOpensMin)})` : ""}`
-      : "Ka dalë jashtë orarit",
-    "",
-    "⚠ Detyrim do të llogaritet në dalje",
-    "   (paguhet në kabinë para se të dilni)",
-    "",
-    `Nr: ${notice.occurrenceId}`,
-  ];
   const printedBy = await printWithFailover(printers, "booth-receipt", (d: PrinterDevice) =>
-    d.printReport({ title: "PARKIM — JASHTË ORARIT", lines }),
+    d.printWindowChargeNotice({
+      occurrenceId: notice.occurrenceId,
+      holderName: notice.holderName ?? null,
+      at: notice.at,
+      edge: notice.edge,
+      windowOpensMin: notice.windowOpensMin ?? null,
+      header: ticketHeader(db),
+    }),
   );
   logger.info(`out-of-window notice printed for ${notice.occurrenceId} on ${printedBy}`);
   return printedBy;
diff --git a/apps/web/src/BoothPayModal.tsx b/apps/web/src/BoothPayModal.tsx
index 670ac76..0c3d1de 100644
--- a/apps/web/src/BoothPayModal.tsx
+++ b/apps/web/src/BoothPayModal.tsx
@@ -45,6 +45,13 @@ export function BoothPayModal({ identity, onClose }: { identity: string; onClose
   const [result, setResult] = useState<string | null>(null);
   const [openingShift, setOpeningShift] = useState(false);
   const [reprinting, setReprinting] = useState(false);
+  // For a PREPAID subscriber with nothing owed, the audited manual barrier open
+  // (assist a faulty reader / lost card) is no longer the default action — the
+  // operator reveals it explicitly so the modal isn't an always-on "open" button.
+  const [assistRevealed, setAssistRevealed] = useState(false);
+  // For a subscriber WINDOW CHARGE, payment and the barrier open are two steps: pay
+  // first, then the modal reveals "Open barrier". This flips true once paid.
+  const [windowPaid, setWindowPaid] = useState(false);
 
   const s: SessionLookup | undefined = session.data;
   // Checkbox default comes from config the first time it loads; operator can toggle.
@@ -87,6 +94,25 @@ export function BoothPayModal({ identity, onClose }: { identity: string; onClose
     }
   }
 
+  // Subscriber out-of-window charge: take the payment, but DON'T exit yet. The
+  // barrier open is the operator's explicit second step (so the flow reads:
+  // pay → then Open barrier), mirroring the two-step the operator asked for.
+  async function handlePaySubscriptionWindow() {
+    if (!s) return;
+    setError(null);
+    setPhase("paying");
+    try {
+      await paySession(identity, tender);
+      setWindowPaid(true);
+      setPhase("review");
+      void qc.invalidateQueries({ queryKey: ["session", identity] });
+      void qc.invalidateQueries({ queryKey: qk.events });
+    } catch (e) {
+      setError((e as Error).message);
+      setPhase("error");
+    }
+  }
+
   async function handleOpenShift() {
     setOpeningShift(true);
     setError(null);
@@ -280,17 +306,22 @@ export function BoothPayModal({ identity, onClose }: { identity: string; onClose
                   </span>
                 </div>
 
-                {/* For a subscription with a window charge, explain why it's payable. For a
-                    plain prepaid subscription, explain the assist-open is the only action. */}
-                {subWindowDue ? (
+                {/* Subscription guidance: an unpaid window charge explains the pay-first
+                    gate; once paid, prompt the operator to open the barrier; a prepaid
+                    subscriber sees the assist explanation only after revealing it. */}
+                {subWindowDue && !windowPaid ? (
                   <div className="rounded-term border border-term-amber/40 bg-term-amber/5 px-3 py-2 text-[12px] text-term-text">
                     {t("pay.windowChargeHint")}
                   </div>
-                ) : isSubscription && (
+                ) : isSubscription && windowPaid ? (
+                  <div className="rounded-term border border-term-green/40 bg-term-green/5 px-3 py-2 text-[12px] text-term-text">
+                    {t("pay.windowPaidHint")}
+                  </div>
+                ) : isSubscription && assistRevealed ? (
                   <div className="rounded-term border border-term-cyan/40 bg-term-cyan/5 px-3 py-2 text-[12px] text-term-text">
                     {t("pay.subAssistHint")}
                   </div>
-                )}
+                ) : null}
 
                 {/* For an overstay, explain why a top-up is required (no free exit). */}
                 {isOverstay && (
@@ -302,37 +333,36 @@ export function BoothPayModal({ identity, onClose }: { identity: string; onClose
                 {/* Snapshots */}
                 <SnapshotStrip identity={identity} />
 
-                {phase !== "done" && !isSubscription && (
-                  <>
-                    {/* Tender */}
-                    {canPay && (
-                      <div className="flex items-center gap-2">
-                        <span className="text-[11px] uppercase tracking-wider text-term-muted">{t("pay.tender")}</span>
-                        {(["cash", "card"] as const).map((tn) => (
-                          <button
-                            key={tn}
-                            type="button"
-                            onClick={() => setTender(tn)}
-                            className={tender === tn ? "btn btn-primary btn-sm" : "btn btn-sm"}
-                          >
-                            {t(`pay.${tn}`)}
-                          </button>
-                        ))}
-                      </div>
-                    )}
+                {/* Tender — shown for any payable case (transient, overstay, OR a
+                    subscriber window charge that's still unpaid). */}
+                {phase !== "done" && canPay && !(subWindowDue && windowPaid) && (
+                  <div className="flex items-center gap-2">
+                    <span className="text-[11px] uppercase tracking-wider text-term-muted">{t("pay.tender")}</span>
+                    {(["cash", "card"] as const).map((tn) => (
+                      <button
+                        key={tn}
+                        type="button"
+                        onClick={() => setTender(tn)}
+                        className={tender === tn ? "btn btn-primary btn-sm" : "btn btn-sm"}
+                      >
+                        {t(`pay.${tn}`)}
+                      </button>
+                    ))}
+                  </div>
+                )}
 
-                    {/* Voucher checkbox (default from site config) */}
-                    <label className="flex items-center gap-2 text-[12px]">
-                      <input
-                        type="checkbox"
-                        className="accent-term-amber"
-                        checked={voucher}
-                        onChange={(e) => setPrintVoucherChecked(e.target.checked)}
-                      />
-                      {t("pay.printExitVoucher")}
-                      <span className="text-term-muted">{t("pay.selfExitHint")}</span>
-                    </label>
-                  </>
+                {/* Voucher checkbox (transient only; a subscriber doesn't self-exit). */}
+                {phase !== "done" && !isSubscription && (
+                  <label className="flex items-center gap-2 text-[12px]">
+                    <input
+                      type="checkbox"
+                      className="accent-term-amber"
+                      checked={voucher}
+                      onChange={(e) => setPrintVoucherChecked(e.target.checked)}
+                    />
+                    {t("pay.printExitVoucher")}
+                    <span className="text-term-muted">{t("pay.selfExitHint")}</span>
+                  </label>
                 )}
 
                 {error && <div className="rounded-term border border-term-red px-3 py-2 text-term-red">{error}</div>}
@@ -374,16 +404,41 @@ export function BoothPayModal({ identity, onClose }: { identity: string; onClose
                         {t("common.cancel")}
                       </button>
                       {isSubscription ? (
-                        // Prepaid — the only action is the audited barrier open (assist
-                        // a faulty exit reader / missing card). Gated on an open shift.
-                        <button
-                          type="button"
-                          onClick={handleOpenBarrier}
-                          disabled={!shiftReady || phase === "finishing"}
-                          className="btn btn-pay btn-lg"
-                        >
-                          {phase === "finishing" ? t("pay.opening") : t("booth.openBarrier")}
-                        </button>
+                        subWindowDue && !windowPaid ? (
+                          // Step 1 — a window charge is owed: take payment first. The
+                          // barrier open is the explicit next step (revealed once paid).
+                          <button
+                            type="button"
+                            onClick={handlePaySubscriptionWindow}
+                            disabled={!shiftReady || phase === "paying"}
+                            className="btn btn-go btn-lg"
+                          >
+                            {phase === "paying" ? t("pay.takingPayment") : t("pay.payWindowCharge")}
+                          </button>
+                        ) : windowPaid || assistRevealed ? (
+                          // The audited barrier open. Shown only AFTER a window charge is
+                          // settled, or after the operator explicitly reveals the assist —
+                          // never as the default action for a prepaid subscriber.
+                          <button
+                            type="button"
+                            onClick={handleOpenBarrier}
+                            disabled={!shiftReady || phase === "finishing"}
+                            className="btn btn-pay btn-lg"
+                          >
+                            {phase === "finishing" ? t("pay.opening") : t("booth.openBarrier")}
+                          </button>
+                        ) : (
+                          // Prepaid, nothing owed: no default open. A small reveal exposes
+                          // the audited manual open for a faulty reader / lost card.
+                          <button
+                            type="button"
+                            onClick={() => setAssistRevealed(true)}
+                            disabled={!shiftReady}
+                            className="btn btn-ghost btn-sm"
+                          >
+                            {t("pay.assistOpenReveal")}
+                          </button>
+                        )
                       ) : (
                         <button
                           type="button"
diff --git a/apps/web/src/lib/i18n/en.ts b/apps/web/src/lib/i18n/en.ts
index 943f414..4229e00 100644
--- a/apps/web/src/lib/i18n/en.ts
+++ b/apps/web/src/lib/i18n/en.ts
@@ -705,8 +705,11 @@ export const en: Catalog = {
     plan: "Plan",
     prepaid: "PREPAID",
     subAssistHint: "Prepaid subscription. Open the barrier to assist the exit (faulty reader / missing card). No payment.",
+    assistOpenReveal: "Assist open (faulty reader / lost card)…",
+    payWindowCharge: "Take payment",
+    windowPaidHint: "Window charge paid. Open the barrier to let the subscriber out.",
     windowCharge: "OUT-OF-WINDOW",
-    windowChargeHint: "This subscriber parked outside their plan's allowed hours. They owe the transient tariff for the out-of-window time — take payment to allow the exit.",
+    windowChargeHint: "This subscriber parked outside their plan's allowed hours. They owe the transient tariff for the out-of-window time — take payment, then open the barrier.",
     subBarrierOpened: "Barrier opened for the subscriber (intervention recorded).",
     voucherPrinted: "Exit voucher printed on {{printer}}. Customer self-exits at the exit.",
     // payment receipt (transparency slip)
diff --git a/apps/web/src/lib/i18n/sq.ts b/apps/web/src/lib/i18n/sq.ts
index f8b4149..823d039 100644
--- a/apps/web/src/lib/i18n/sq.ts
+++ b/apps/web/src/lib/i18n/sq.ts
@@ -719,8 +719,11 @@ export const sq = {
     plan: "Plani",
     prepaid: "I PARAPAGUAR",
     subAssistHint: "Abonim i parapaguar. Hap barrierën për të ndihmuar daljen (lexues me defekt / kartë e munguar). S'ka pagesë.",
+    assistOpenReveal: "Ndihmë për hapje (lexues me defekt / kartë e humbur)…",
+    payWindowCharge: "Merr pagesën",
+    windowPaidHint: "Pagesa jashtë orarit u krye. Hap barrierën që abonenti të dalë.",
     windowCharge: "JASHTË ORARIT",
-    windowChargeHint: "Ky abonent parkoi jashtë orarit të lejuar të planit. Detyrohet të paguajë tarifën kalimtare për kohën jashtë orarit — merr pagesën për të lejuar daljen.",
+    windowChargeHint: "Ky abonent parkoi jashtë orarit të lejuar të planit. Detyrohet të paguajë tarifën kalimtare për kohën jashtë orarit — merr pagesën, pastaj hap barrierën.",
     subBarrierOpened: "Barriera u hap për abonentin (ndërhyrje e regjistruar).",
     voucherPrinted: "Bileta e daljes u printua në {{printer}}. Klienti del vetë te dalja.",
     // payment receipt (transparency slip)
diff --git a/packages/devices/src/drivers/printer-cashino.ts b/packages/devices/src/drivers/printer-cashino.ts
index bdf871b..2419606 100644
--- a/packages/devices/src/drivers/printer-cashino.ts
+++ b/packages/devices/src/drivers/printer-cashino.ts
@@ -5,6 +5,7 @@ import type {
   ReceiptData,
   SubscriptionCardData,
   TicketData,
+  WindowChargeNoticeData,
 } from "../interfaces.js";
 import type { ConfigField, DeviceConfig, PrinterDriver } from "../registry.js";
 import { hostField, portField, stubLog } from "./common.js";
@@ -14,6 +15,7 @@ import {
   renderReport,
   renderSubscriptionCard,
   renderTicket,
+  renderWindowChargeNotice,
   sendRaw,
 } from "./printer-escpos.js";
 
@@ -102,6 +104,11 @@ class CashinoPrinter implements PrinterDevice {
       `printed ${data.voucher ? "voucher" : "receipt"} ${data.ticketId}`,
     );
   }
+
+  async printWindowChargeNotice(data: WindowChargeNoticeData): Promise<void> {
+    await sendRaw(this.#host, this.#port, renderWindowChargeNotice(data), this.#timeout);
+    stubLog(this.driverId, `printed out-of-window slip ${data.occurrenceId}`);
+  }
 }
 
 const roleField: ConfigField = {
diff --git a/packages/devices/src/drivers/printer-escpos.ts b/packages/devices/src/drivers/printer-escpos.ts
index af76d46..76cfd8c 100644
--- a/packages/devices/src/drivers/printer-escpos.ts
+++ b/packages/devices/src/drivers/printer-escpos.ts
@@ -4,6 +4,7 @@ import type {
   ReceiptData,
   SubscriptionCardData,
   TicketData,
+  WindowChargeNoticeData,
 } from "../interfaces.js";
 
 // Shared ESC/POS rendering + raw-TCP transport for 80mm thermal printers.
@@ -68,6 +69,19 @@ const ASCII_FALLBACK: Record<string, string> = {
   í: "i",
   ó: "o",
   ú: "u",
+  // Typographic punctuation that creeps in from composed strings — CP852 has no
+  // em/en dash, ellipsis, curly quotes, or the warning sign, so without these they
+  // print as "?" (the cause of the "PARKIM ? JASHTË ORARIT" misprint). Degrade to
+  // the obvious ASCII equivalent rather than a literal "?".
+  "—": "-", // em dash U+2014
+  "–": "-", // en dash U+2013
+  "…": "...", // ellipsis U+2026
+  "‘": "'",
+  "’": "'",
+  "“": '"',
+  "”": '"',
+  "⚠": "!", // warning sign U+26A0 — no glyph on a thermal head; "!" reads as a flag
+  "•": "*",
 };
 
 /** Encode one line of text to CP852 bytes + a line feed. ASCII (<0x80) passes
@@ -188,6 +202,21 @@ const STR = {
   ],
   /** Thank-you footer. */
   thanks: "Faleminderit!",
+  // --- out-of-window advisory slip (subscriber) ---
+  /** Slip title. ASCII dash (not em dash) so no codepage surprise. */
+  windowTitle: "PARKIM - JASHTË ORARIT",
+  /** "Subscriber: <name>" line. */
+  windowHolder: (name: string) => `Abonent: ${name}`,
+  /** Entry-edge line; appends the window-open time when known. */
+  windowEnteredEarly: (opensHHMM?: string) =>
+    opensHHMM ? `Ka hyrë jashtë orarit (orari hap ${opensHHMM})` : "Ka hyrë jashtë orarit",
+  /** Exit-edge line. */
+  windowExitedLate: "Ka dalë jashtë orarit",
+  /** "Entry:" / "Exit:" stamp label per edge. */
+  windowStamp: (edge: "entry" | "exit", v: string) => (edge === "entry" ? `Hyrja: ${v}` : `Dalja: ${v}`),
+  /** Two short lines (each fits 80mm) telling the customer a fee is pending and
+   *  is settled at the booth before exit. ASCII "!" flag (no glyph for ⚠). */
+  windowPending: ["! Detyrim do të llogaritet në dalje", "  (paguhet në kabinë para se të dilni)"] as const,
 } as const;
 
 /** Format integer minor units + ISO-4217 currency as a major-unit string for the
@@ -409,6 +438,48 @@ export function renderReceipt(data: ReceiptData): Buffer {
   return Buffer.concat(parts);
 }
 
+/** Build the ESC/POS byte stream for the ADVISORY out-of-window slip. Header →
+ *  title → a SCANNABLE Code128 + QR of the occurrence id (so the operator scans it
+ *  straight into the booth pay modal — same path as a transient ticket) → the id in
+ *  text (hand-key fallback) → holder + entry/exit stamp → the "pay at booth" notice.
+ *  Carries NO amount (the booth quotes the combined charge at settlement). Albanian. */
+export function renderWindowChargeNotice(data: WindowChargeNoticeData): Buffer {
+  const hhmm = (m?: number | null) =>
+    m == null ? undefined : `${String(Math.floor(m / 60)).padStart(2, "0")}:${String(m % 60).padStart(2, "0")}`;
+  const parts: Buffer[] = [
+    INIT,
+    SELECT_CP852,
+    renderHeader(data.header),
+    line(),
+    ALIGN_CENTER,
+    BOLD_ON,
+    line(STR.windowTitle),
+    BOLD_OFF,
+    line(),
+    // The occurrence id, scannable two ways: Code128 for a 1D laser scanner, QR for
+    // the booth's combo reader. Either pulls the occurrence up in the pay modal.
+    code128(data.occurrenceId),
+    line(),
+    qrCode(data.occurrenceId),
+    line(),
+    // The id in text, as the hand-key fallback if neither scans.
+    line(data.occurrenceId),
+    ALIGN_LEFT,
+    line(),
+  ];
+  if (data.holderName) parts.push(line(STR.windowHolder(data.holderName)));
+  parts.push(line(STR.windowStamp(data.edge, stamp(data.at))));
+  parts.push(
+    line(data.edge === "entry" ? STR.windowEnteredEarly(hhmm(data.windowOpensMin)) : STR.windowExitedLate),
+    line(),
+    BOLD_ON,
+    ...STR.windowPending.map((l) => line(l)),
+    BOLD_OFF,
+    FEED_AND_CUT,
+  );
+  return Buffer.concat(parts);
+}
+
 /** Open a TCP socket, write the bytes, and close GRACEFULLY so the printer reads the
  *  whole stream before the connection tears down.
  *
diff --git a/packages/devices/src/drivers/printer-rongta.ts b/packages/devices/src/drivers/printer-rongta.ts
index c5cb8d5..766dfc8 100644
--- a/packages/devices/src/drivers/printer-rongta.ts
+++ b/packages/devices/src/drivers/printer-rongta.ts
@@ -8,6 +8,7 @@ import type {
   PrintReport,
   SubscriptionCardData,
   TicketData,
+  WindowChargeNoticeData,
 } from "../interfaces.js";
 import type { ConfigField, DeviceConfig, PrinterDriver } from "../registry.js";
 import { hostField, portField, stubLog } from "./common.js";
@@ -17,6 +18,7 @@ import {
   renderReport,
   renderSubscriptionCard,
   renderTicket,
+  renderWindowChargeNotice,
   sendRaw,
 } from "./printer-escpos.js";
 
@@ -186,6 +188,11 @@ class RongtaPrinter implements PrinterDevice, MonitorableDevice {
     );
   }
 
+  async printWindowChargeNotice(data: WindowChargeNoticeData): Promise<void> {
+    await sendRaw(this.#host, this.#port, renderWindowChargeNotice(data), this.#timeout);
+    stubLog(this.driverId, `printed out-of-window slip ${data.occurrenceId}`);
+  }
+
   /**
    * Live operator-actionable status, scraped from the device's own status page.
    * The board decodes the ESC/POS status bits itself, so we trust its Yes/No
diff --git a/packages/devices/src/interfaces.ts b/packages/devices/src/interfaces.ts
index d6d9aef..e0cbbd2 100644
--- a/packages/devices/src/interfaces.ts
+++ b/packages/devices/src/interfaces.ts
@@ -247,6 +247,26 @@ export interface SubscriptionCardData {
   readonly header?: TicketHeader;
 }
 
+/** An ADVISORY "out-of-window" slip for a subscriber who entered/exited outside
+ *  their plan's allowed hours. NOT a payable ticket and carries NO final amount —
+ *  the total is computed at the booth on settlement. It carries the OCCURRENCE id as
+ *  a SCANNABLE Code128 + QR so the operator scans it straight into the booth pay
+ *  modal (which then quotes the window charge) instead of hand-keying it — the same
+ *  scan path as a transient ticket. See wiki/entities/subscription.md. */
+export interface WindowChargeNoticeData {
+  /** The occurrence id (e.g. "SUBSESS-…") — the session identity the booth pay
+   *  modal looks up. Encoded as the scannable code. */
+  readonly occurrenceId: string;
+  readonly holderName?: string | null;
+  /** When the scan happened (ISO-8601), printed as the human stamp. */
+  readonly at: string;
+  /** Entry (early) vs exit (late) — selects the wording. */
+  readonly edge: "entry" | "exit";
+  /** Minutes-from-midnight the allowed window opens, when known (entry slips). */
+  readonly windowOpensMin?: number | null;
+  readonly header?: TicketHeader;
+}
+
 export interface PrinterDevice extends Device {
   printTicket(data: TicketData): Promise<void>;
   /** Print a free-form text report (a shift Z-report, a receipt). `lines` are
@@ -259,6 +279,8 @@ export interface PrinterDevice extends Device {
    *  voucher mode it also carries the ticket-id barcode + grace window so it
    *  doubles as the self-exit voucher. See ReceiptData. */
   printReceipt(data: ReceiptData): Promise<void>;
+  /** Print the advisory out-of-window slip with a scannable occurrence-id code. */
+  printWindowChargeNotice(data: WindowChargeNoticeData): Promise<void>;
 }
 
 export interface PrintReport {