PayLio Payments for WooCommerce

PayLio is a hosted card checkout, also for high-risk merchants. Customers choose PayLio at checkout, are redirected to the PayLio payment page and pay by card. Apple Pay, Google Pay and local methods are offered where they are available for the customer’s device, country and amount. No card data ever touches your store and nothing is embedded in an iframe.

An order is marked paid only after:

1. PayLio sent a webhook signed with a secret that is unique to that order, and
2. the plugin asked the PayLio API directly and PayLio confirmed that the payment is paid, with the amount and currency the payment was created with, and the order total has not changed since.

Features

• Hosted checkout: card, Apple Pay and Google Pay
• Choose one payment provider or let the customer choose on the PayLio checkout
• Processing fee included in your price or added to the customer’s total
• Order status after payment: WooCommerce default, Processing or Completed
• Unpaid orders are cancelled after a configurable time, with a final status check first (a paid order is never cancelled)
• Automatic status re-checks if a webhook is lost, plus a manual “Check PayLio payment status” order action
• “Test connection” button for your API key
• High-Performance Order Storage (HPOS) and Cart/Checkout Blocks compatible
• English and German included

Supported order currencies: USD, EUR, CAD, INR, GBP. Order totals from 0.01 to 10000.00. If you choose a single provider, orders below that provider’s minimum do not see the payment method.

A PayLio account at paylio.org and an API key are required.

About this plugin

This is the official PayLio plugin, developed and maintained by PayLio, the operator of the PayLio service at paylio.org. PayLio is our own brand.

WooCommerce is a trademark of Automattic Inc. This plugin is an independent extension for WooCommerce; it is not affiliated with, sponsored or endorsed by WooCommerce or Automattic.

External services

This plugin connects to the PayLio API (default https://paylio.org, configurable under Advanced) to process payments. PayLio is a payment service operated by the plugin author. Without it the plugin cannot take payments.

• Hosted checkout: after placing an order the customer is redirected to the PayLio payment page on paylio.org and enters the card details there. The store never receives card data.

• Creating a payment (when a customer places an order with PayLio): order total, currency, the customer’s billing e-mail address, the order number, your store’s domain, the store’s webhook URL, a random per-order webhook secret, the configured provider and fee setting, and, if set, your payout wallet address. Authenticated with your PayLio API key.

• Checking a payment (after a webhook, on a schedule, before an unpaid order is cancelled, or when an administrator uses the order action): the PayLio payment id and your API key.
• Provider list (on the settings page and, with a single provider configured, at checkout; cached for one hour): a request without API key or customer data.
• Test connection (only when an administrator clicks the button): your API key.
• Received: payment id, checkout URL, status, amount, currency, transaction ids and the list of available providers with their minimum amounts.
• Webhooks: PayLio calls the store’s ?wc-api=paylio_webhook URL when a payment changes. The call is signed per order and only triggers the status check above.
• Every request carries the plugin name and version in the X-PayLio-Client header.
• Terms: https://paylio.org/terms
• Privacy policy: https://paylio.org/privacy