About this plugin
NoHoldPay is a non-custodial cryptocurrency payment gateway for WooCommerce. Your customers pay an address you control, and the funds settle directly into your own wallet. The platform never touches the money: it watches the blockchain, matches each payment to the right order, and advances the WooCommerce order through a signed webhook.
No payouts to wait for, no account freezes, and no chargebacks.
This plugin adds NoHoldPay to WooCommerce as a redirect-to-hosted-checkout gateway: when a buyer chooses a NoHoldPay method, the plugin creates a payment through the NoHoldPay Merchant API and redirects the buyer to a secure hosted checkout. Signed webhooks then move the order forward, with an independent server-side re-verification before an order is marked paid.
Why non-custodial matters
Most crypto gateways route customer funds through a pooled hot wallet or an internal balance they control. That is custody, and it can be frozen, hacked, or lost. NoHoldPay is structurally different: it cannot lose, freeze, or run off with money it never holds.
Your keys, your coins.
Key features
- Non-custodial by design: customers pay a wallet you own, and funds never pass through the platform.
- Coin groups as payment methods: group coins (for example Stablecoins or Privacy coins) and each enabled group appears as its own payment option at checkout, with an optional logo, a default coin, and a “Restrict to these coins” toggle.
- Many chains and coins through the hosted checkout: Bitcoin, Ethereum, BNB Smart Chain, Base, Polygon, Solana, Tron, Litecoin, Bitcoin Cash, Dogecoin, Monero, XRP, Stellar and TON, plus stablecoins such as USDC, USDT, USDS, EURC and PYUSD, and tokens such as Chainlink. Which coins are available depends on your NoHoldPay account settings.
- Secure hosted checkout: a mobile-friendly checkout with a live countdown, QR code, and real-time status. Prices are shown in your store currency.
- Signed, verified webhooks: orders advance only on HMAC-signed webhooks, with an independent server-side re-check of amount, currency and order binding before an order is marked paid.
- Order status mapping: map NoHoldPay states (awaiting payment, confirmed, underpaid, expired, cancelled, refunded) to your own WooCommerce order statuses.
- Tamper-proof amounts: the charged amount is derived from the order total on the server, never from the browser.
- Works with the classic (shortcode) checkout and the Cart/Checkout Blocks.
- HPOS (High-Performance Order Storage) compatible.
mode=signup), along with your own cryptocurrency wallet to receive funds.
External services
This plugin relies on the third-party service below. It contacts the service only from your web server (never from the buyer’s browser), and only when the relevant feature is used.
com)
This is the non-custodial payment processor the plugin integrates with. It is required for the plugin to work. You create a NoHoldPay account and connect it with an API key.
The plugin contacts this API in these cases:
- When a buyer places an order with a NoHoldPay method, to create the crypto payment. Data sent: the order total and currency, your store order id, an order description (your order number and store name), the order-received and checkout return URLs (only when those are public URLs), the buyer’s billing email address when present, and the buyer’s IP address, but only when it is public and routable (the same one WooCommerce already records on the order, and what the processor uses to attribute the payment to its payer). Your API key is sent as a bearer credential. No card or bank details are involved.
- When a signed webhook reports a payment as confirmed, to independently re-read that payment and re-verify its amount, currency and order before the order is marked paid. Data sent: the NoHoldPay payment id and your API key.
- On the gateway settings screen, and periodically while an administrator is in the admin area, to read the list of coins your API key can accept (this is what tells the plugin whether a wallet is configured). Data sent: your API key.
The API base URL is configurable if you self-host NoHoldPay.
com/legal/terms
com/legal/privacy