F2M Pay for WooCommerce

F2M Pay for WooCommerce is a comprehensive payment gateway plugin that enables your WooCommerce store to accept cryptocurrency payments. This plugin goes beyond basic payment processing by offering advanced features including profit sharing, automated refund management, and support for multiple signature methods.

Key Features

• Multiple Cryptocurrency Support – Accept payments in various cryptocurrencies supported by F2M Pay
• Advanced Profit Sharing – Automatically split payments between multiple parties (merchant, TSP, distributor)
• Smart Refund Orchestration – State machine-based refund processing with automatic commission clawback
• Multi-Signature Methods – Supports HMAC-SHA256, HMAC-SHA512, and RSA signature algorithms
• Channel Partner Support – Built-in support for channel partner/sub-merchant configurations
• Express Checkout – Quick checkout buttons on product and cart pages
• HPOS Compatible – Full support for WooCommerce High-Performance Order Storage
• Centralized Management – Optional centralized database for multi-store management
• Comprehensive Logging – Detailed transaction, webhook, and refund logs for debugging
• Secure Credential Storage – AES-256-CBC encryption for sensitive API credentials

Payment Flow

1. Customer selects F2M Pay at checkout
2. Order is created and customer is redirected to F2M Pay checkout
3. Customer completes payment using their F2M account
4. Webhook confirms payment and order is automatically completed
5. If profit sharing is enabled, commissions are automatically distributed
6. Refunds trigger automatic commission clawback and customer refund

Requirements

• WordPress 6.0 or higher
• WooCommerce 7.0 or higher
• PHP 7.4 or higher
• MySQL 5.7 or higher
• SSL certificate (HTTPS required)
• F2M account with API credentials

Documentation & Support

For documentation and support, please visit F2M Labs or contact us at contact@f2mlabs.com.

Security

This plugin implements multiple security measures:

• AES-256-CBC encryption for API credentials
• Prepared statements for all database queries
• Input sanitization and output escaping
• Nonce verification for AJAX requests
• Capability checks for admin functions
• HTTPS requirement for webhooks
• Signature verification for payment webhooks
• Security headers on API endpoints

If you discover a security vulnerability, please email security@f2mlabs.com

External Services

This plugin connects to external third-party services to process payments. By using this plugin, you agree to the terms and privacy policies of these services.

F2M Pay API

This plugin sends data to the F2M Pay API (the payment gateway API) to create and process cryptocurrency payments.

Data sent: * Order number and amount * Currency and fiat currency * Merchant ID and API credentials (server-to-server only)

When data is sent: * When a customer initiates a payment at checkout * When querying payment or refund status * When processing refunds

• F2M Pay Terms of Service
• F2M Pay Privacy Policy

Centralized Management API (Optional)

If configured by the store administrator, this plugin can optionally connect to a centralized management API to synchronize transaction data across multiple stores. This feature is disabled by default and requires the administrator to explicitly configure the API endpoint and key in the plugin settings.

Data sent (when enabled): * Transaction records (order ID, amount, currency, status) * Webhook logs * Refund records * Store URL and Merchant ID

Data NOT sent: * F2M API Secret (never transmitted) * Customer personal information * Payment card or wallet details

This feature can be fully disabled by leaving the “Central API Endpoint” and “Central API Key” fields empty in the plugin settings.

DPT Pay API

This plugin supports DPT Pay as an alternative cryptocurrency payment gateway.

Data sent: * Order number and amount * Currency * Merchant ID (server-to-server only)

When data is sent: * When a customer selects DPT Pay at checkout * When querying payment status * When processing refunds

Privacy Policy

This plugin:

• Stores transaction data (order amounts, trade numbers, statuses) in your WordPress database
• Sends order information (order number, amount, currency) to F2M Pay API for payment processing
• Optionally sends transaction and webhook data to a centralized management API if explicitly configured by the administrator
• Does not send customer personal data (name, email, address) to any third party
• Does not store or transmit F2M API Secrets to any external service
• Complies with GDPR requirements for data handling

For more information, see our Privacy Policy

Credits

Developed by F2M Labs https://www.f2mlabs.com

License

This plugin is licensed under GPLv3 or later. https://www.gnu.org/licenses/gpl-3.0.html