Description
RizzPay for WooCommerce adds a hosted checkout payment gateway to WooCommerce so approved merchants can accept crypto payments through the RizzPay checkout flow.
The plugin is built for stores that want a focused payment option without adding checkout complexity. Customers choose RizzPay at checkout, WooCommerce creates the order, and the customer is redirected to the hosted RizzPay checkout page. Payment outcomes are sent back to WooCommerce through signed webhook events.
What merchants get
- Hosted checkout redirect flow for secure payment processing.
- WooCommerce payment-method row with RizzPay branding.
- Merchant credentials managed from WooCommerce payment settings.
- Connection test before going live.
- Trusted return-to-merchant handoff after checkout when the store URL is safe.
- Signed webhook handling with duplicate-event protection.
- WooCommerce order-status updates for settled and underpaid outcomes.
Payment flow
- Customer selects
Pay with RizzPayat checkout. - WooCommerce creates the order and redirects to the hosted RizzPay checkout.
- RizzPay can return the customer to the merchant order-received page.
- RizzPay sends signed webhook events back to WooCommerce.
- WooCommerce updates order state using verified event payloads.
Security and order handling
RizzPay webhook requests are validated with the X-COR-Signature header before order state changes are applied. Duplicate event IDs/sequences are ignored, and raw webhook bodies are not stored in order metadata.
Card and bank provider access
Card and bank provider options are permissioned per merchant account. Merchants can request provider access from the RizzPay dashboard; until approved, checkout continues through the direct crypto payment flow.
Screenshots
WooCommerce Payments list with the RizzPay gateway active. 
RizzPay gateway settings with merchant credentials and connection test. 
WooCommerce checkout with the RizzPay payment method expanded. 
Hosted RizzPay payment path selection for wallet, card/bank, and crypto options.
Installation
- Install the plugin from WordPress.org, or upload the release ZIP from
Plugins > Add New > Upload Plugin. - Activate
RizzPay for WooCommerce. - Make sure WooCommerce is installed and active.
- Go to
WooCommerce > Settings > Payments. - Locate
Accept payments with RizzPayand clickManage. - Enable the gateway and save your RizzPay credentials.
- Save changes and run the connection test.
You will need:
- Client ID
- Client Secret
- Beneficiary User ID
- Webhook Secret
- API Base URL
FAQ
-
Do I need a RizzPay merchant account?
-
Yes. The plugin connects WooCommerce to your RizzPay merchant credentials.
-
What callback URL should I use for webhooks?
-
Use:
https://YOUR_STORE_DOMAIN/?wc-api=rizzpay_wc_webhook -
What signature header is required?
-
X-COR-Signature
-
How does return-to-merchant work?
-
The plugin automatically sends WooCommerce’s order-received URL as
returnUrl
when it is safe:- HTTPS store URL: enabled automatically
- Local loopback HTTP (
localhost,127.0.0.1,::1): enabled for local dev - Non-HTTPS public URL: blocked for safety
This return action is UX-only. Fulfillment and order-credit decisions must follow signed webhook updates.
-
How do I enable card/bank provider options?
-
Card/bank provider options (Onramper flow) are permissioned per merchant account.
- In the dashboard open
Settings > Onramper flow. - Submit your Telegram username for admin verification.
- Wait for approval, then keep using the same Woo plugin credentials.
Until approved, checkout continues on direct crypto flow.
- In the dashboard open
-
What if webhook signatures fail?
-
Check that the webhook secret configured in RizzPay exactly matches the
Webhook Secretsaved in WooCommerce settings. -
How are duplicate events handled?
-
Duplicate event IDs/sequences are safely ignored and do not re-apply state transitions.
-
Which order statuses are expected?
-
Typical outcomes:
- Settled exact payment ->
processing - Underpaid settled payment ->
on-hold - Invalid signature -> rejected (
401)
- Settled exact payment ->
Reviews
There are no reviews for this plugin.
Contributors & Developers
“RizzPay for WooCommerce” is open source software. The following people have contributed to this plugin.
Contributors
Translate “RizzPay for WooCommerce” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
0.1.3
- Cleared remaining WordPress Plugin Check warnings for settings routing, WooCommerce save-button detection, webhook signature header handling, and intentional order-meta lookup.
0.1.2
- Removed explicit WordPress.org translation loader because WordPress 4.6+ loads directory-hosted translations automatically.
- Sanitized and validated webhook request method and signature header values before use.
- Stopped storing raw signed webhook request bodies; order metadata now stores a sanitized normalized JSON snapshot.
0.1.1
- Added trusted
returnUrlhandoff support for Woo checkout-created payments so payers can return to the merchant order-received page after hosted checkout. - Improved underpaid result messaging on hosted checkout status pages by showing actual received amount instead of requested amount.
- Removed non-functional underpaid action buttons to keep the underpaid flow clear and deterministic.
- Added merchant integration docs coverage for return URL behavior across API, iframe, and Woo flows.
0.1.0
- Initial production candidate release.
- Hosted checkout redirect + credential validation.
- Signed webhook handling and duplicate-event protection.
- Settled/underpaid order status mapping.
- Checkout and provider-list UI polish.