Fondy — card payments for WooCommerce

Fondy for WooCommerce is a payment plugin that accepts Visa/Mastercard, Apple Pay and Google Pay payments through a secure Fondy (Flitt) page. Once the customer pays, Fondy sends a signed server callback to the plugin’s REST webhook, which verifies the SHA1 signature and sets the order to the right status itself. No manual “was it paid or not” reconciliation — an order is confirmed only once the money has actually gone through.

The basic version is free. Download: catcode-card-payments-with-fondy-for-woocommerce.zip. Free gives you card payment acceptance and auto-confirmation of orders via webhook; Pro adds a payment log with status reconciliation, two-step payment (preauth + capture) and partial and repeat refunds (reverse) right from the admin.

What the admin gets

How it works, step by step

1. At checkout, the customer chooses “Card payment (Fondy)” and places the order. Both the classic and block (Gutenberg) checkout work.
2. The plugin builds a signed request and redirects the customer to a secure Fondy payment page — card, Apple Pay or Google Pay.
3. After payment, Fondy sends a server callback to the wc-fondy/v1/webhook REST route. The plugin verifies the SHA1 signature and sets the order to “Processing” or “Completed”.
4. When the customer returns to the site, the status is additionally reconciled via the Status API — the order is only completed once the transaction is genuinely successful.
5. With Pro: in two-step mode, funds are only held (preauth) and are captured automatically when you move the order to “Completed”. Refunds — full or partial — are made from the order screen or the log.

How much it costs

890 UAH — a one-year licence. A year of updates, technical support and access to all Pro features. No auto-charges: renewal is always manual, and we never store card details.

You can take a longer term straight away — the longer it is, the cheaper each year works out:

• 1 year — 890 UAH
• 2 years — 1,690 UAH (−5%, 845 UAH per year)
• 3 years — 2,350 UAH (−12%, 783 UAH per year)
• 4 years — 2,920 UAH (−18%, 730 UAH per year)
• 5 years — 3,340 UAH (−25%, 668 UAH per year)

Once the term expires, only updates and new features stop — Pro features keep working, the free version keeps running, and your settings and data don’t go anywhere. To reopen Pro, simply renew the licence in your account. We’ll remind you by email 14, 7, 3 and 1 day before it ends.

One key — one domain. Moving the shop, deactivate the licence on the old domain and activate it on the new one yourself, without contacting support.

Trial first, then payment. The free version doesn’t turn anything on by itself: Pro features are visible in their usual places with a “Pro” tag, and the 7-day trial only starts once you click “Try Pro for 7 days” and enter your email — a real licence key is sent to it. The payment log, preauth and refunds can be tested on your own shop before you buy. That’s exactly why refunds after purchase aren’t offered — you see the module at work before you pay.

Technical requirements

• WooCommerce 6.0+ (classic and block checkout, HPOS)
• WordPress 5.8+
• PHP 7.4+
• Fondy (Flitt) Merchant ID and secret key — from the Fondy account; not needed for testing — a public test merchant is available

Under the hood

• The secret key is encrypted in the database — the encryption key is derived from that specific site’s WordPress salts, so settings copied to another site can’t be decrypted.
• Double payment verification: a signed server callback plus a Status API reconciliation on the customer’s return — a forged request can’t change the status.
• server_callback_url is sent with every payment — nothing to enter manually in the Fondy account.
• Block checkout is supported via a dedicated integration (WooCommerce Blocks), not a legacy fallback.

How to install

1. Download the zip via “Plugins → Add New → Upload Plugin” and activate it.
2. Open “WooCommerce → Settings → Payments” and enable Fondy.
3. Leave “Test mode” on for testing — the plugin works right away on the public test merchant, no agreement needed.
4. For live mode, turn off test mode and enter the Merchant ID and secret key from the Fondy account.
5. For Pro, after purchase enter the licence key from the email → “Activate licence”.

Version history

1.1.1 — August 2026

Fixed: on shops with HPOS (typical for modern WooCommerce), a simultaneous callback and customer return could still process the payment twice — the order was being re-read from WooCommerce’s internal cache. Returning after payment no longer shows “Payment not completed” on an already-paid order.

1.1.0 — August 2026

Free is genuinely free: a fresh install no longer turns Pro on by itself. The 7-day trial starts on a click: email → real licence key → activation. Pro features stay visible in their usual places with a “Pro” badge and an explanation of what they offer; the payment log no longer vanishes from the menu without a licence. The key is checked on the CatCode server (14 days’ grace if the server is unreachable) and is no longer wiped by an ordinary “Save changes”. Fixed: double payment confirmation when the webhook and customer return arrive simultaneously; double encryption of the merchant’s secret key on repeated saves; loss of the “&” and “<” characters in the secret key.

1.0.0 — July 2026

First public release: card payment via the Fondy page, a server callback with SHA1 verification, reconciliation via the Status API, a test merchant, classic and block checkout, HPOS. Pro: payment log, two-step payment (preauth/capture), full and partial refunds.