Nepal Payments for WooCommerce

Nepal Payments for WooCommerce brings the four payment methods Nepali customers actually use into one free plugin:

• eSewa — the most widely used wallet in Nepal (ePay v2 integration)
• Khalti — wallet, mobile banking, and connected banks (ePayment KPG-2 integration)
• ConnectIPS — direct bank-account payments through NCHL
• Credit/Debit Cards (Visa/Mastercard) — via NIC Asia’s Cybersource Secure Acceptance hosted checkout

You bring your own merchant accounts. Get your credentials from each provider, paste them into the plugin settings, and the gateway appears at checkout. Each gateway can be enabled independently.

Security model: card and wallet data never touch your site

Every gateway uses a hosted redirect flow. Your customer pays on the provider’s own secure page (eSewa, Khalti, connectIPS, or Cybersource) and is redirected back to your store. No card numbers, PANs, wallet passwords, or OTPs are ever entered on, transmitted through, or stored by your WordPress site.

On top of that:

• Every payment is verified server-to-server with the provider before the order is marked paid — the plugin never trusts the browser redirect alone.
• The confirmed amount is always compared against the order total. On any mismatch the order is put on hold, never completed.
• Duplicate or concurrent payment callbacks cannot double-complete an order.
• Your secret keys and passwords are stored encrypted (libsodium) and are shown only as masked values in the admin.
• The ConnectIPS signing certificate is stored in a directory blocked from web access.

Built to catch your mistakes

A dedicated Status & Setup page checks your environment in plain English: missing SSL, wrong store currency, blocked payment callbacks (maintenance mode, basic auth, security plugins), missing PHP extensions, and more. Every gateway has a one-click connection test, a SANDBOX/LIVE badge so you always know which environment you are in, and credential fields that automatically strip stray whitespace and quotes and warn you when a value looks wrong. Failed payments get an order note with the provider’s raw error code plus a plain-English explanation.

Checkout compatibility

Works with both the classic (shortcode) checkout and the modern WooCommerce Blocks checkout, and is compatible with High-Performance Order Storage (HPOS).

Refunds

Version 1 does not send refunds through the provider APIs. The order screen shows the gateway transaction reference and a direct link to the right provider dashboard so you can refund there.

Free forever

This plugin is free, with no Pro version, no locked features, and no upsells.

External services

This plugin is a checkout integration for four independent Nepali payment providers. To process a payment, it hands the customer off to whichever provider they choose at checkout, so your site can complete the order. No card numbers, wallet passwords, or OTPs pass through your server — the customer enters those directly on the provider’s own hosted page. Only the following happens on your server, and only when a customer places an order or completes/cancels a payment:

eSewa (only if you enable the eSewa gateway) When a customer chooses eSewa, they are redirected with the order amount and a transaction ID to eSewa’s hosted payment form (https://epay.esewa.com.np/api/epay/main/v2/form, or the sandbox equivalent) to complete payment. After they return, this plugin sends the transaction ID and order amount to eSewa’s transaction status API (https://epay.esewa.com.np/api/epay/transaction/status/) to confirm the payment happened, before marking the order paid. This service is provided by eSewa: Terms and Conditions, Privacy Policy.

Khalti (only if you enable the Khalti gateway) When a customer chooses Khalti, this plugin sends the order amount and basic order/customer details (name, email, phone, if provided at checkout) to Khalti’s payment initiation API (https://khalti.com/api/v2/epayment/initiate/, or the sandbox equivalent) to start the hosted payment. After the customer pays or cancels, this plugin calls Khalti’s lookup API to confirm the payment status and amount before marking the order paid. This service is provided by IME Khalti Limited: Terms & Conditions, Privacy Policy.

ConnectIPS (only if you enable the ConnectIPS gateway) When a customer chooses ConnectIPS, they are redirected with the order amount and a signed transaction request to NCHL’s connectIPS gateway (https://login.connectips.com/, or the UAT sandbox equivalent) to pay directly from their bank account. After they return, this plugin calls connectIPS’s transaction validation API to confirm the payment status and amount before marking the order paid. This service is provided by Nepal Clearing House Ltd (NCHL): connectIPS Privacy Policy, NCHL Privacy Policy. Contact NCHL or your bank for the connectIPS merchant terms of use issued during onboarding.

Card payments via NIC Asia (Cybersource Secure Acceptance) (only if you enable the card gateway) When a customer chooses to pay by card, they are redirected with the order amount to a Cybersource Secure Acceptance hosted payment page (https://secureacceptance.cybersource.com/pay, or the test environment equivalent) provisioned through your NIC Asia merchant account, so the card number is entered directly with Cybersource and never touches your server. After the customer pays or cancels, Cybersource posts a signed confirmation back to your server, which this plugin verifies before marking the order paid. This service is provided by Cybersource (a Visa solution) under your NIC Asia merchant agreement: Cybersource Terms and Conditions, Cybersource Data Processing Agreement / Privacy. Contact NIC Asia Bank for the cardholder terms specific to your merchant account.