PuranPay for WooCommerce

Description

PuranPay for WooCommerce redirects the customer to the hosted pay page. They Send Money from bKash, Nagad, Rocket, or Upay, type the TrxID, and the official SMS match marks the WooCommerce order paid.

This plugin is a client for the PuranPay service. You need a PuranPay account, an active plan, and a paired phone app so official wallet SMS can be matched. The plugin does not lock features behind a license key. PuranPay’s Terms of Service and Privacy Policy apply to that service.

How it works

1. Customer places a WooCommerce order and chooses PuranPay.
2. The shop creates a payment with your secret key and redirects to checkoutUrl.
3. After the TrxID matches, PuranPay POSTs payment.verified to your webhook.
4. The plugin verifies x-puranpay-signature (HMAC-SHA256 of the raw body) and calls payment_complete.

Do not treat the browser return as paid. The thank-you page only syncs if the webhook is late.

Setup

1. In PuranPay: Billing → buy a plan. Settings → add this shop domain (host only, no https://).
2. Settings → Webhook URL → paste the URL shown on the PuranPay gateway settings screen (/wp-json/puranpay/v1/webhook).
3. Copy sk_live_ (or sk_test_ in Test mode) and the webhook secret into WooCommerce → Settings → Payments → PuranPay.
4. Pair the Android app under Phone app so official SMS can match.

Store currency must be BDT. The checkout host and API URL default to PuranPay production (https://api.puranpay.com).

Third-party service

Checkout is created on PuranPay (https://api.puranpay.com). The customer is redirected to hosted pay, then PuranPay POSTs a signed webhook back to this shop.

• PuranPay
• Privacy Policy
• Terms of Service

Privacy

When a customer pays, the plugin sends order amount, order id, and optional billing name / email / phone to PuranPay so checkout and the verified webhook can run. No data is sent until you save a secret key and the customer places an order. See puranpay.com/privacy.

Technical details