About this plugin
F2M Pay for WooCommerce is a comprehensive payment gateway plugin that enables your WooCommerce store to accept cryptocurrency payments. This plugin goes beyond basic payment processing by offering advanced features including profit sharing, automated refund management, and support for multiple signature methods.
Key Features
- Multiple Cryptocurrency Support – Accept payments in various cryptocurrencies supported by F2M Pay
- Advanced Profit Sharing – Automatically split payments between multiple parties (merchant, TSP, distributor)
- Smart Refund Orchestration – State machine-based refund processing with automatic commission clawback
- Multi-Signature Methods – Supports HMAC-SHA256, HMAC-SHA512, and RSA signature algorithms
- Channel Partner Support – Built-in support for channel partner/sub-merchant configurations
- Express Checkout – Quick checkout buttons on product and cart pages
- HPOS Compatible – Full support for WooCommerce High-Performance Order Storage
- Centralized Management – Optional centralized database for multi-store management
- Comprehensive Logging – Detailed transaction, webhook, and refund logs for debugging
- Secure Credential Storage – AES-256-CBC encryption for sensitive API credentials
Payment Flow
- Customer selects F2M Pay at checkout
- Order is created and customer is redirected to F2M Pay checkout
- Customer completes payment using their F2M account
- Webhook confirms payment and order is automatically completed
- If profit sharing is enabled, commissions are automatically distributed
- Refunds trigger automatic commission clawback and customer refund
Requirements
- WordPress 6.0 or higher
- WooCommerce 7.0 or higher
- PHP 7.4 or higher
- MySQL 5.7 or higher
- SSL certificate (HTTPS required)
- F2M account with API credentials
Documentation & Support
com.
Security
This plugin implements multiple security measures:
- AES-256-CBC encryption for API credentials
- Prepared statements for all database queries
- Input sanitization and output escaping
- Nonce verification for AJAX requests
- Capability checks for admin functions
- HTTPS requirement for webhooks
- Signature verification for payment webhooks
- Security headers on API endpoints
com
External Services
This plugin connects to external third-party services to process payments. By using this plugin, you agree to the terms and privacy policies of these services.
F2M Pay API
This plugin sends data to the F2M Pay API (the payment gateway API) to create and process cryptocurrency payments.
Data sent:
* Order number and amount
* Currency and fiat currency
* Merchant ID and API credentials (server-to-server only)
When data is sent:
* When a customer initiates a payment at checkout
* When querying payment or refund status
* When processing refunds
- F2M Pay Terms of Service
- F2M Pay Privacy Policy
Centralized Management API (Optional)
If configured by the store administrator, this plugin can optionally connect to a centralized management API to synchronize transaction data across multiple stores. This feature is disabled by default and requires the administrator to explicitly configure the API endpoint and key in the plugin settings.
Data sent (when enabled):
* Transaction records (order ID, amount, currency, status)
* Webhook logs
* Refund records
* Store URL and Merchant ID
Data NOT sent:
* F2M API Secret (never transmitted)
* Customer personal information
* Payment card or wallet details
This feature can be fully disabled by leaving the “Central API Endpoint” and “Central API Key” fields empty in the plugin settings.
DPT Pay API
This plugin supports DPT Pay as an alternative cryptocurrency payment gateway.
Data sent:
* Order number and amount
* Currency
* Merchant ID (server-to-server only)
When data is sent:
* When a customer selects DPT Pay at checkout
* When querying payment status
* When processing refunds
Privacy Policy
This plugin:
- Stores transaction data (order amounts, trade numbers, statuses) in your WordPress database
- Sends order information (order number, amount, currency) to F2M Pay API for payment processing
- Optionally sends transaction and webhook data to a centralized management API if explicitly configured by the administrator
- Does not send customer personal data (name, email, address) to any third party
- Does not store or transmit F2M API Secrets to any external service
- Complies with GDPR requirements for data handling
For more information, see our Privacy Policy
Credits
Developed by F2M Labs
com
License
This plugin is licensed under GPLv3 or later.
html