A production-focused WooCommerce gateway for the Payten/NestPay network — hosted 3-D Secure payments, installments, pre-authorization, capture, void and refunds, backed by recovery tools, strict callback handling and bank-level diagnostics.
Payten / NestPay integrations across Serbia, Türkiye and CEE
● bank presets where available · ● manual configuration for other compatible institutions
Every critical action is available in the WordPress admin. Merchants do not need SSH, WP-CLI or server access to run diagnostics or recover an order.
Customers enter card details and complete authentication on the bank's protected payment pages. Signed callbacks are verified before an order is updated, and malformed callback data is rejected.
Offer standard card payments or bank-supported installment plans at checkout, with clear order metadata for the selected payment type.
Reserve funds with pre-authorization, then capture the full or an allowed smaller amount, or void the authorization directly from the order screen.
Refund from WooCommerce with bank-side validation, available-balance checks and safeguards against zero-value or excessive refund requests.
Manual and scheduled bank-status checks can recover an approved payment when the shopper's return callback never reaches the store, where the bank supports Query.
A failed or interrupted attempt can be paid again through the WooCommerce customer payment page without creating a duplicate order or confusing its transaction history.
Native support for WooCommerce's classic and block-based checkout flows, with HPOS-compatible order storage.
A dedicated transaction view brings order state, bank order ID, transaction ID, payment action, installments, latest query and warnings into one operational screen.
Readiness checks verify callback reachability, background recovery, bank configuration and operational email delivery before a store goes live.
Keep a staging site password protected while explicitly allowing the payment callback and background runner to remain reachable for realistic testing.
Modern email alerts, scheduler diagnostics and safe admin-side repair controls surface payment infrastructure problems before they become silent failures.
Copy an encoded diagnostic record or open a structured bank/support report with sensitive values redacted, making support precise without exposing card data or secrets.
Sanval Payments adds safeguards around the bank-hosted flow so a payment result, retry or admin action cannot silently become a second financial event or an unauthorized order change.
Bank callbacks are signature-checked and structurally validated before order state changes. Duplicate, nested, malformed and oversized callback inputs are rejected instead of being guessed or normalized into a payment result.
Repeated valid callbacks are handled idempotently. A replay does not create a second payment completion, duplicate transaction record or second financial effect for the same approved attempt.
Capture, void, refund and bank-status operations share an operation lock so conflicting actions cannot race each other across concurrent admin requests.
Financial actions are bound to authenticated WooCommerce capabilities, the intended order and a valid request token. A stale tab or cross-order request cannot bypass the server-side checks.
Server-to-server bank endpoints are validated for HTTPS and unsafe target patterns before use, reducing the risk of a misconfigured endpoint becoming a path into private or local infrastructure.
Bank messages and support data are normalized for safe display. Diagnostic exports are capped and redact secrets, card data and sensitive URLs while preserving the identifiers support teams actually need.
The free edition covers core hosted single payments, refunds and WooCommerce checkout compatibility. Premium adds installments, pre-authorization, reconciliation, reporting, alerts, payment-integrity safeguards and priority support.
Select a bank preset or custom endpoint, add the credentials supplied by the acquiring bank, choose payment action and installment rules, then test without touching server configuration.
Confirm the callback, background recovery, bank setup and alert delivery. Protected staging can remain locked down while the two payment-critical routes stay reachable.
Capture, void, refund, check status, recover lost callbacks, inspect a redacted support report and follow the transaction trail from the same WooCommerce interface.
Per site · renews yearly · cancel anytime
Secure checkout and applicable VAT handled by Freemius. 14-day refund policy.
If the institution uses a compatible Payten/NestPay contract, you can enter its endpoint and credentials manually. Ready presets reduce setup work for supported banks; the first complete sandbox and live tests remain the final confirmation.
No card number is entered into your WooCommerce server. The customer is redirected to the bank's hosted payment and authentication pages; the plugin creates signed transaction requests and verifies the bank's returned payment messages before updating the order.
Where the acquiring bank supports its Query operation, Premium can check the bank and recover an approved payment manually or in the background. The order records exactly how the recovery happened.
Core hosted single payments remain available. Premium includes a grace period, while existing authorized orders remain eligible for Capture or Void so an expired licence cannot strand funds already reserved at the bank.
No. Readiness checks, scheduler repair, bank-status queries, reports, alerts and order operations are designed for the WordPress and WooCommerce admin interfaces.
The gateway validates callback signatures and structure, rejects malformed or duplicate-field payloads, handles repeated approved callbacks idempotently, binds privileged actions to the intended order and user capability, serializes conflicting financial operations, and redacts sensitive diagnostic data. These safeguards sit around the bank-hosted flow; they do not replace the acquiring bank's own security controls.
Hosted payments, payment operations, recovery, payment-integrity safeguards, diagnostics and support — €49/year.
Get Sanval Payments