Portmone for WooCommerce — card, Apple Pay and Google Pay payments

Portmone for WooCommerce is a payment plugin that accepts card, Apple Pay and Google Pay payments through Portmone.com. The customer goes to the Portmone payment page, pays, and the order in your shop confirms itself. The key difference from the usual “redirect and take their word for it”: the plugin trusts neither the customer’s return nor the notification — before marking an order as paid, it asks Portmone for the status itself and checks the amount.

What the admin gets

• Payee ID, store login and password from your Portmone account. The password and the signature key are stored encrypted in the database.
• “Check connection” — the plugin requests a status with your credentials and, if a signature key is set, creates a 1 UAH test invoice and closes it straight away. A wrong password or key shows up in the admin, not in a customer complaint.
• Order notes: the Portmone order number, bill number, masked card and the result of every check.
• Time to pay — how many minutes the payment link stays valid.
• Order status after payment — “Processing” or straight to “Completed”.

How it works, step by step

1. At checkout the customer picks “Card, Apple Pay, Google Pay (Portmone)” and places the order. It works in both the classic and the block checkout.
2. The plugin creates a payment link in Portmone with a unique attempt number and the order amount and currency. If Portmone gave you a signature key, the request is signed with HMAC-SHA256.
3. The customer pays on the Portmone page — by card, Apple Pay, Google Pay or any other method enabled for your shop. Card details never pass through your site.
4. The customer returns to the shop. The plugin ignores whatever came in the URL or POST and asks Portmone for the status using the store login and password.
5. Amount check. If less was paid than the order costs, the order does not become paid; it goes “On hold” with a note for the manager.
6. The order moves to “Processing” (or the status you chose), stock is reduced and the customer gets the WooCommerce email.
7. If the customer closed the tab and never came back, the Portmone notification to the address in the settings fires, and the plugin checks the status through the API in the same way. As a fallback, the status is also pulled on the “Thank you” page.
8. A retry (card declined, the customer clicked “Pay” again): the plugin first checks whether the previous link was paid and closes the old bill in Portmone, so one order can’t be paid twice.
9. With Pro in pre-authorisation mode the money is only blocked on the card. Move the order to “Completed” and the money is captured; cancel it and the block is released. Card schemes hold a block for up to 7 days.

Under the hood

• Status comes only from the Portmone API. The customer’s return, the notification and the check button all lead to one place: a result request with the store login and password. Faking a payment by sending a POST to the site won’t work.
• Amount and ownership checks: the order number must have been issued to this very order, the Payee ID must be yours, and the amount must not be lower than the order total.
• Protection against double confirmation: the customer’s return and the notification often arrive at the same moment. A database-level lock and a fresh re-read of the order (HPOS cache included) guarantee one “payment received” note and one stock reduction.
• Late statuses don’t roll back a payment: a late “declined” from an old attempt won’t turn a paid order into a failed one.
• Its own gateway ID: the plugin doesn’t clash with the official Portmone module if that one is installed too.
• The password is masked in logs and stored encrypted in the database.
• A Pro gate that doesn’t brick the shop: when the trial ends, only the Pro features stop. Money that was already blocked is still captured on “Completed”, so the customer’s funds don’t get stuck.

How to install

1. Plugins → Add New → Upload Plugin: choose portmone-for-woocommerce-1.0.2.zip and activate it.
2. WooCommerce → Settings → Payments → Portmone.
3. Enter the Payee ID, store login and password (and the signature key, if Portmone gave you one), then save.
4. Click “Check connection”.
5. Send your Portmone manager the notification address — it is shown at the bottom of the settings page.
6. For Pro: paste the licence key from the email you get after payment, or start the 7-day trial.