VibeFox OpenPay for OpenCart

Overview

VibeFox OpenPay Gateway adds credit and debit card payments through OpenPay (BBVA) to OpenCart 3 and OpenCart 4, for OpenPay accounts from Mexico, Colombia and Peru. The card form is shown at the Confirm Order step, but the card is tokenized in the browser by openpay.js, so the card number and CVV never reach your store. Every payment goes through 3D Secure. OpenCart creates the order before the payment, but the order gets a status only after OpenPay confirms the charge.

The extension takes one-time card payments captured immediately. It has no saved cards, subscriptions, months without interest (MSI) or installments, card points, cash, SPEI, PSE or CoDi payments, and no separate authorize and capture.

Key features

Card form with 3D Secure: card form at the Confirm Order step, tokenized by openpay.js with the OpenPay antifraud device check; every charge goes through 3D Secure on the bank page.

Paid only when OpenPay confirms: the charge is read back from the OpenPay API when the customer returns from 3D Secure and when the webhook arrives. OpenCart then sends its usual order e-mails.

Amount and currency check: a completed charge must match the order total and currency exactly. A mismatch puts the order in a review status with a note, not paid.

Never charged twice: a cart that is already paid is never charged again, and before a new attempt the previous charge of the cart is checked.

Sandbox and live: separate Merchant ID, private key and public key for each mode. Refunds and webhooks always use the keys of the mode and account country the charge was made in.

Refunds from the order page: full and partial refunds in the VibeFox OpenPay Gateway tab of the order for Mexico and Peru (Colombia: in the OpenPay dashboard). Dashboard refunds and chargebacks are noted on the order.

Clear customer messages: expired card, insufficient funds, wrong CVV, failed 3D Secure and other OpenPay errors get short messages; technical errors are never shown to customers.

Your own order statuses and OpenCart conditions: choose the statuses for paid, awaiting, review, failed and refunded orders; geo zone, minimum total and sort order. Optional log without keys, card data or customer data.

Requirements

OpenCart 3.0.x (tested on 3.0.5.0) or OpenCart 4.0.2 and later (tested on 4.1.0.3), PHP 8.0 or later, HTTPS. One download has the packages for both versions. An OpenPay account from Mexico, Colombia or Peru with its Merchant ID, private key and public key (sandbox and live), and an order currency the account accepts. A VibeFox license key from vibefox.net (one key per domain).