ZeroKYC – Crypto Payments for WooCommerce

Description

ZeroKYC Pay is a crypto payment gateway for digital services. This plugin connects your WooCommerce store to the ZeroKYC Pay hosted checkout: the buyer pays in crypto, you receive payouts to your own wallets, and orders are completed automatically.

How it works

1. At checkout the buyer picks ZeroKYC Pay and is redirected to a secure hosted checkout page.
2. The buyer pays in USDT (TRC-20), USDC or USDT (Polygon, Arbitrum), BTC, XMR, TON or USDT-TON — or one asset of your choice.
3. The plugin verifies the signed webhook (HMAC-SHA256, constant-time comparison, replay protection) and re-checks the invoice server-side before completing the order. A browser success URL is never treated as proof of payment.
4. A WP-Cron job polls open invoices every 15 minutes as a safety net for lost webhooks.

Features

• Redirect-based hosted checkout — no card data, no wallets on your server
• HMAC-verified webhooks with duplicate/replay protection
• Idempotent invoice creation (retries never create duplicate invoices)
• Server-side confirmation of every payment before an order is completed
• Amount and asset matching against the invoice for pinned assets
• Automatic order cancellation when an invoice expires unpaid (optional)
• Sandbox mode out of the box — test the full flow with a pk_test_… key
• WooCommerce high-performance order storage (HPOS) compatible
• No tracking, no external assets, no cookies

Requirements

• A ZeroKYC Pay account — create one at console.zerokyc-payments.com
• Shop currency USD, EUR or RUB (invoice amounts)
• Classic WooCommerce checkout (block-based checkout support is on the roadmap)

Pricing and legal

ZeroKYC Pay is a paid service (1% transit fee or subscription plans). Fees are charged by the service, not by this plugin. See the Terms of Service and Privacy Policy. Cryptocurrency payments are final; refunds are processed manually by the merchant.

Privacy

To process a payment, the plugin sends to ZeroKYC Pay: the order amount and currency, an order reference, an order description, and your site’s URLs (checkout success and webhook). No customer personal data (name, address, email) is transmitted by the plugin. Webhook payloads and the plugin’s own records (invoice ids, payment amounts) are stored in your database. See the ZeroKYC Pay privacy policy.

Technical details