diff --git a/components/autofill/core/browser/payments/payments_request_details.h b/components/autofill/core/browser/payments/payments_request_details.h
index e3f40c9248d64..20fd1a7dfc4ca 100644
--- a/components/autofill/core/browser/payments/payments_request_details.h
+++ b/components/autofill/core/browser/payments/payments_request_details.h
@@ -511,7 +511,10 @@ struct GetBnplPaymentInstrumentForFetchingUrlRequestDetails {
   // The instrument ID is used by the server to identify a specific BNPL issuer.
   std::string instrument_id;
   // The fingerprint data for the user and the device.
-  std::string_view risk_data;
+  // Owning copy: this struct outlives the per-frame BnplManager (it is held by
+  // the per-WebContents PaymentsNetworkInterface across an async OAuth token
+  // fetch), so a non-owning view would dangle on navigation.
+  std::string risk_data;
   // The merchant domain (including the scheme).
   GURL merchant_domain;
   // The total purchase amount (in micros) from the merchant checkout page.