Up2Pay, Monetico and Systempay for OpenCart 2.3, 3.x and 4.x — card payments through French banks

Up2Pay, Monetico & Systempay is an OpenCart payment module for three French bank gateways: Up2Pay e-Transactions (Crédit Agricole), Monetico (Crédit Mutuel and CIC) and Systempay (Banque Populaire and Caisse d’Epargne). The buyer pays by card on the bank’s secure page with 3-D Secure, and the order becomes paid only after the bank’s signed answer.

What the buyer sees

The buyer picks the “Bank card” of the bank, sees the total and the “Pay by card” button at the confirm step and goes to the bank’s page. After paying they come back to the shop; if the bank’s confirmation has not arrived yet, the page says it is waiting and moves on by itself. A refusal or a cancellation does not close the order: the buyer sees the bank’s reason in their language, the cart is kept, and the payment can be made again.

What the admin gets

Extensions → Payments → Up2Pay, Monetico & Systempay: main bank, Test or Production, a tab per bank with the contract data and keys, the contract currency (orders in another shop currency are converted at the shop’s rate), order statuses and geo zone. A “Check” button per bank checks the data without moving money; for Up2Pay another button fills in the public demo shop of Crédit Agricole.

The order gets a payment tab: amount, bank, reference, transaction, card and every payment attempt. In Pro a full or partial refund goes to the bank from there; if a bank’s answer gets lost, further refunds are locked until you check the bank’s back office. The payment journal lists all payments and refunds of the three banks.

How it works, step by step

1. You pick the main bank and enter the contract data and keys on its tab.
2. Systempay: you copy the IPN URL from the settings into the bank’s back office. Up2Pay and Monetico get the notification address with every payment.
3. The buyer confirms the order, and the module sends them to the bank’s page with a signed form.
4. The bank tells the shop the result; the module checks the signature, amount, currency and cart, and only then sets the paid status. A mismatch gets its own status to review.
5. In Pro the buyer chooses one of two or three banks, and refunds are made from the order page.

Under the hood

• Up2Pay: form with HMAC; the buyer’s return and the notification are checked against the bank’s RSA public key.
• Monetico: MAC in the form and in the “Retour” answer, the 3-D Secure order context.
• Systempay: vads_* signature (HMAC-SHA-256 or SHA-1) in the form, the IPN and the buyer’s return.
• An order is never paid twice: one payment, one history line.
• Return addresses are short because the banks limit their length; an address that is too long is not sent, with a warning in the settings.
• Keys are stored encrypted; the debug log has no keys or card data.

How to install

1. Extensions → Installer: upload the archive for your version without renaming the file.
2. OpenCart 3.x and 2.3: Extensions → Modifications → Refresh.
3. Extensions → Payments → Up2Pay, Monetico & Systempay → install → edit.
4. Pick the main bank, enter its data and keys on its tab, save and press “Check”.
5. Systempay: copy the IPN URL into the back office. Then one payment with a bank test card in the Test environment, and switch to Production.
6. For Pro: paste the key or start the 7-day trial at the top of the settings page.