Scanandpay Payments via PayID for WooCommerce

Scan & Pay enables Australian WooCommerce stores to accept PayTo PayID payments directly. Customers scan a QR code at checkout, first-time customers approve a one-time PayTo agreement in their banking app, and returning customers confirm with a passkey.

How It Works

1. Customer selects “Scan & Pay” at checkout
2. A unique QR code is displayed for their order
3. Customer scans the QR code and confirms on the payment page – first-time customers approve PayTo once, returning customers use a passkey
4. Payment is verified in real-time by Scan & Pay API
5. Order is automatically marked as paid when payment is confirmed

Features

• Unified SDK Architecture – Now uses the official Scan & Pay PHP SDK logic internally
• Instant PayTo PayID Payments – Real-time payment confirmation via webhooks
• QR Code Checkout – Mobile-friendly payment experience
• Returning Customer Passkeys – Faster repeat checkout after one-time PayTo setup
• WooCommerce Blocks Support – Works with classic and block-based checkout
• Secure – HMAC-signed webhooks with replay protection, encrypted API communication
• Fallback Polling – Automatic status checks if webhooks are delayed

Requirements

• WooCommerce 7.0 or higher
• PHP 7.4 or higher
• A Scan & Pay merchant account (Sign up here)
• Australian PayID configured with your bank

External Services

This plugin connects to the Scan & Pay API to:

• Create payment sessions when customers checkout
• Generate QR codes for PayTo PayID payments
• Receive payment confirmation webhooks
• Verify payments in real-time
• Check payment status

Service Provider: Scan & Pay Payment Verification: Scan & Pay API Terms of Service: https://scanandpay.com.au/terms/ Privacy Policy: https://scanandpay.com.au/privacy-policy/

Data transmitted to the service includes: order amount, currency, order reference, and merchant credentials. No customer personal data is sent to the external service.

All QR codes are generated securely by the Scan & Pay backend infrastructure – no third-party QR code services are used.