VibeFox Peach Payments for WooCommerce

Overview

Peach Payments Pay Gateway adds Peach Payments card payments to WooCommerce. It connects to the Peach Payments Card API (COPYandPAY). After placing the order, the customer enters the card details in the Peach Payments payment form on the Pay for order page of your store. Card data is entered in the Peach Payments form and never touches your server. Visa, Mastercard, American Express and Diners Club are supported.

It suits stores in South Africa, Kenya and Mauritius that sell in ZAR, KES or MUR and have a Peach Payments account. The plugin has no refunds from the WooCommerce order screen (refund in the Peach Payments dashboard), no saved cards, no subscriptions, no pre-authorisation and capture, and no EFT, BNPL, QR or other non-card methods.

Key features

Paid only when Peach Payments confirms: the browser redirect never marks an order paid. When the customer returns, the store reads the result of this order's checkout from the Peach Payments API, server to server.

Encrypted webhooks: Peach Payments Card webhooks (AES-256-GCM) confirm payments even if the customer closes the browser before returning. If the order is busy, the webhook is answered with a temporary error and Peach Payments sends it again.

Amount and currency check: every payment is compared with the order. A mismatch puts the order on hold with a note instead of marking it paid.

No double processing: repeated webhooks, page reloads, or a webhook arriving together with the customer return do not create duplicate notes, e-mails or stock changes. A paid or cancelled order is never silently changed, and a second payment for a paid order is flagged for refund.

Test and live modes: separate Entity ID, Access Token and webhook key for the Peach Payments sandbox and the live account. A payment is always checked in the mode it was started in.

Dashboard operations as notes: refunds, reversals and chargebacks made in the Peach Payments dashboard are added to the order as notes by the webhook.

Card brands: choose which brands the payment form shows. The form script is loaded with a Subresource Integrity hash.

Modern WooCommerce: classic checkout, Checkout block, the Pay for order page, HPOS. Logs without card data, keys or customer data. Translation ready.

Requirements

WordPress 6.2 or later, WooCommerce 8.0 or later, PHP 8.0 or later. A Peach Payments account with the Card API Entity ID and Access Token (test and/or live), and the webhook decryption key from Peach Payments for webhooks. Store currency: ZAR, KES or MUR. A VibeFox license key from vibefox.net (one key per domain).