Magento 2 COPYandPAY Integration

Compatible with Magento 2 community and enterprise 2.3.3 - 2.4.x including cloud edition

Securely accept payments in Magento 2 with COPYandPAY, now with support for Visa, Mastercard, Ecocash, OneWallet, and Zimswitch in both USD and ZWG currencies. Our integration embeds a hosted payment widget to reduce your PCI compliance scope to SAQ-A, lowering your security burden. Benefit from a reliable 3-step flow (checkoutId & secure status retrieval), configurable sandbox/production modes, detailed debug logging, and auto-cancellation of stale orders.

  • Accept payments via Visa, Mastercard, Ecocash, OneWallet, and Zimswitch.

  • Process transactions seamlessly in both USD and ZWG currencies.

  • Lower compliance burden with a hosted payment widget for PCI SAQ-A alignment.

  • Utilize a secure 3-step flow: prepare checkout (checkoutId), render widget, and get status.

  • Full admin control with sandbox/production modes, debug logging, and brand display.

  • Automatically cancel pending orders after a configurable timeout.

 

Free Support

up to 60 days

Free Upgrades

up to 1 year

Fully open source

 

Product description

 Magento 2 COPYandPAY Integration

Compatible with Magento 2 community and enterprise 2.3.3 - 2.4.x including cloud edition

The Magento 2 COPYandPAY Integration provides a secure, seamless, and versatile payment solution for your eCommerce store. By embedding a hosted widget directly into your checkout, this extension allows you to accept payments from major international and regional providers including Visa, Mastercard, Ecocash, OneWallet, and Zimswitch in both USD and ZWG currencies.

It keeps sensitive card data away from your Magento server, dramatically reducing your PCI compliance scope to SAQ-A standards and shortening implementation time. The flow is intentionally simple: generate a checkoutId from the server, render the payment widget on the storefront, and retrieve the final payment status server-side to finalize the order.

Why COPYandPAY for Magento 2?

  • Localized Payment Options: Expand your reach by offering customers their preferred payment methods. Our integration supports international cards like Visa and Mastercard alongside essential regional services like Ecocash, OneWallet, and Zimswitch, with full support for USD and ZWG currencies.

  • Lower PCI Scope: The hosted widget handles all sensitive card entry and 3-D Secure steps, not your Magento server. This aligns with SAQ-A compliance requirements and significantly reduces security overhead.

  • Faster Go-Live: Simply embed a single script and a form to render one or more payment brand inputs. The widget reliably manages the user experience and complex authentication challenges for you.

  • Stable and Secure Buyer Experience: Multiple brand forms can be rendered to match promotional goals or separate card families, while a single, secure status retrieval path keeps the order flow consistent and reliable.

How It Works (Three Secure Steps)

  1. Prepare the Checkout (Server-to-Server): Magento securely posts order details (amount, currency, order type) to the payment provider and receives a unique checkoutId. This short-lived token is required to render the payment widget on the storefront.

  2. Render the Payment Widget (Storefront): The checkout page uses the checkoutId to display one or more payment forms. The hosted widget collects payment data, performs any required 3-D Secure steps, and handles the user interaction securely.

  3. Get the Payment Status (Server-to-Server): After the customer is redirected to your configured result URL with a resourcePath, Magento performs an authenticated server-side GET request to retrieve the final payment status. The order is then moved to the correct state (e.g., Processing) and the transaction ID is recorded.

Frontend Buyer Journey

The customer's checkout experience is designed to be simple, secure, and intuitive.

  1. At checkout, the customer selects COPYandPAY as their preferred payment method.

  2. Upon proceeding, the Magento site securely generates a checkoutId and embeds the payment widget directly on the page, displaying options for Visa, Mastercard, Ecocash, OneWallet, or Zimswitch.

  3. The customer enters their payment details into the secure, hosted widget, completes any required 3-D Secure prompts, and submits the payment.

  4. After submission, the customer is redirected to a confirmation page while Magento validates the payment status server-side, confirming a successful transaction and moving the order to the Processing state.

Security and Compliance

  • PCI SAQ‑A Friendly: The widget captures card data; Magento never stores raw card details. This lowers compliance scope and reduces risk.

  • 3‑D Secure 2 Ready: Challenges are handled by the provider; Magento processes authenticated results reliably via server‑side status calls.

  • Safer Production Ops: Clear state transitions and audit‑friendly logs make payment investigations faster and more accurate.

Key Product Features:-

  • Accept payments via Visa, Mastercard, Ecocash, OneWallet, and Zimswitch.

  • Process transactions seamlessly in both USD and ZWG currencies.

  • Reduce PCI compliance scope to SAQ-A with a secure, embedded payment widget.

  • Natively supports 3-D Secure 2 challenges handled by the provider.

  • Utilizes a secure, three-step flow: prepare checkout, render widget, and get status.

  • Offers full admin control to display payment brands in single or multiple forms.

  • Includes sandbox and production modes for safe testing and deployment.

  • Features a debug mode toggle for comprehensive request and response logging.

  • Ensures security by masking sensitive card data in all logs.

  • Provides an audit trail for all payment-related actions for faster support.

  • Automatically cancels stale or abandoned orders via a configurable cron job.

  • Fully compatible with multi-store and multi-website Magento setups.



We offer 60 days of free support and 12 months of free upgrade for any standard Magento site when you buy this extension. You can also get our installation service for a small fee. If you want more benefits, you can purchase our 12 months of free premium support and free lifetime upgrade package. Please contact us if you need any assistance or customization for this extension. We will reply to you within 48 hours. We may also offer you a special deal or a free solution if we like your idea.


** Please refer to our FAQ or T&C section for running our extensions on multiple domains or sub-domains

FAQ

Frequently Asked Questions

Q. How can I get license key for my development website?
A. Please use the same license as live site provided with the order confirmation email on the staging site and ensure you have the latest version of scommerce/core installed i.e 2.0.9.
Once added go to Stores>Configuration>Scommerce Configuration>Core and click on verify. Once verified the license will start working on your staging site.
gtm gdpr settings
Q. Can I test the extension before buying?
A. Unfortunately we can't provide you extension for testing purposes but we have demo available for most of our extensions and happy to provide full refund if the extension doesn't work
Q. Can I request for customisation on your extensions?
A. Yes we do provide all sort of customisation for our clients at the reasonable rates. And if we believe the customisation will help our product then we also provide great discount on the customisation
Q. I have multiple websites/stores, each with a unique domain. Do I need a separate license key for each live domain?
A. Yes, each live domain requires its own license key. Our license keys are URL specific and each live domain, subdomain, subfolder requires a separate key. If you’re running multiple websites from the same Magento instance, we offer a 30% discount when purchasing license keys for two or more domains in a single order. To receive a coupon code, please contact us at support@scommerce-mage.com.
Q. How can I upgrade my extension to the latest version?
A. If your extension is within the free upgrade period (12 months from purchased date) then simply email us with your order number and our team will send you the latest version of the extension but if it is outside free upgrade period then you need to buy an upgrade using the following link
https://www.scommerce-mage.com/magento-extension-installation-service.html

Once you received the latest version of our extension then we would highly recommend to delete all the files and folder of our extension from your website first before uploading the latest version because we might have removed existing files and keeping existing files could cause problems on your website.
Q. Does my license get expired after certain period?
A. No, your license is not going to get expired but we would highly recommend upgrading to get all the latest fixes (including security fixes if any), improvements and new features. In the upgrade, we also ensure it is compatible with the latest version of Magento and when you upgrade you will have a smooth transition.
Q.Where can I download the extension files?
A. Please login into your account on our website and go to the download link under my account section to download the extension package.
Q.Can you provide a key that works for our development (NOT PRODUCTION) environment which will work on a dynamic URL, for example, 12334.gitpod.com and 4567.gitpod.com?
A. Unfortunately it is not possible to generate license keys based on the dynamic URLs. License keys need to be generated per domain or subdomain whether it is production or non-production.
Q. How can I manually uninstall your module?
A. Please follow the below steps -:

Step 1: Navigate to our store and login to your account. Then go to the My Account Section, on the left menu click on Composer Instructions.
My account section
Step 2: Next, run the config commands shown on the top of the page then click on the extension that you want to install. A composer require command will be revealed in the dropdown menu. Run the command then clear caches to complete the installation. Composer instructions
Q. Do you support SPA (Single Page Application) / PWA (Progressive Web Application) / AMP ?
A. Unfortunately, we don’t support SPA or PWA or AMP but we may be supporting them in future depending upon the demand.

Change Log

Version 2.0.1
2026-02-04 10:37:34
- Add compatibility for PHP 7.x and Magento 2.3.x.
- Fixed issues with crons
- Improved the consistency of linking TTS orders with Magento orders
- Fixed issues related to shipment inventory source
Version 2.0.0
2025-07-15 08:24:54
Initial Release
Show More
Show Less

Reviews

Write Your Own Review
Write a Review
You may also like