VibeFox OpenPay for Adobe Commerce

Overview

VibeFox OpenPay Gateway adds credit and debit card payments through OpenPay (BBVA) to Magento Open Source and Adobe Commerce, for OpenPay accounts from Mexico, Colombia and Peru. The card is typed on the payment step but tokenized in the browser by openpay.js, so the card number and security code never reach your store. After Place Order, Magento places the order in Pending Payment and every charge goes through 3D Secure. The order is invoiced only after OpenPay confirms the payment, and the order e-mail is sent only then.

The module takes one-time card payments captured immediately. It has no saved cards, subscriptions, months without interest (MSI) or installments, card points, cash, SPEI, PSE or CoDi payments, no separate authorize and capture, and no payments for orders created in the Admin.

Key features

Card form with 3D Secure: card form on the payment step, tokenized by openpay.js with the OpenPay antifraud device check; every charge goes through 3D Secure.

Paid only when OpenPay confirms: the charge is read back from the OpenPay API when the customer returns from 3D Secure and when the webhook arrives. Unsigned notifications are never trusted on their own.

Amount and currency check: a completed charge must match the order total and currency exactly. A mismatch puts the order On Hold with a note and without an invoice.

Never charged twice: before a new attempt for the same cart the previous charge is checked, repeated webhooks never invoice an order twice, and a declined payment cancels the waiting order and gives the cart back.

Test and live modes: separate merchant ID, private key and public key for each mode. Refunds and webhooks always use the keys of the mode and account country the charge was made in.

Online refunds with Credit Memo: full and partial refunds through the standard Magento Credit Memo of the invoice with Refund, for Mexico and Peru (Colombia: in the OpenPay dashboard). Dashboard refunds and chargebacks are noted on the order.

Clear customer messages: expired card, insufficient funds, wrong CVV, failed 3D Secure and other OpenPay errors get short messages; technical errors are never shown to customers.

Standard Magento settings: all settings are on the standard Payment Methods configuration page, with encrypted private keys, the webhook URL and verification code shown on the page, countries and minimum and maximum order totals, a payment history section with Sync payment status on the order page, and an optional log without keys, card data or customer data.

Requirements

Magento Open Source or Adobe Commerce 2.4.6 to 2.4.9 (your own server or Adobe Commerce on cloud infrastructure; not Adobe Commerce as a Cloud Service), PHP 8.1 to 8.4, HTTPS. An OpenPay account from Mexico, Colombia or Peru with its merchant ID, private key and public key (sandbox and live). A VibeFox license key from vibefox.net (one key per domain).