UQPAY Payment Gateway for WooCommerce

Description

UQPAY Payment Gateway enables merchants to accept card payments (Visa, Mastercard, Amex, UnionPay) and QR code payments (Alipay, WeChat Pay, GrabPay, PayNow, Touch ‘n Go, and more). Customers are redirected to UQPAY’s hosted checkout page where they choose their preferred payment method — card or QR code.

Features:

• Credit/Debit card payments with 3D Secure support
• QR code payments (Alipay, WeChat Pay, GrabPay, PayNow, and more)
• Payment method selection handled on UQPAY’s hosted checkout page
• PCI DSS compliant (SAQ A) — card data never touches your server
• Test/Sandbox mode
• WooCommerce Blocks checkout and classic checkout supported
• WooCommerce HPOS compatible
• Webhook support with HMAC-SHA512 verification
• WooCommerce refund integration

Webhook IP Addresses:

If your site uses a firewall, whitelist these IPs:

• Sandbox: 52.76.137.90
• Production: 18.143.59.64, 54.179.248.205, 13.250.234.88, 18.136.58.213

External services

This plugin relies on the UQPAY payment platform (provided by UQPAY Pte. Ltd.) to process online transactions. UQPAY is a third-party payment service provider that handles card and QR wallet payments on behalf of the merchant. Without this service, the plugin cannot function — no payments can be created, processed, or refunded.

The plugin connects to UQPAY’s services in the following ways:

1. UQPAY Payment API

The plugin communicates with the UQPAY Payment API to create payment intents, query payment status, and issue refunds.

• Live endpoint: https://api.uqpay.com/api
• Sandbox/test endpoint: https://api-sandbox.uqpaytech.com/api

What data is sent and when:

• When a customer places an order and selects UQPAY at checkout, the plugin sends the order amount, currency, order reference number, return URLs, and billing details (name, email, address, phone — as provided by the customer in WooCommerce checkout) to UQPAY in order to create a Payment Intent.
• When the customer returns from the hosted checkout, the plugin sends the Payment Intent ID to UQPAY to verify the final payment status.
• When the merchant issues a refund from the WooCommerce admin, the plugin sends the original Payment Intent ID, the refund amount, currency, and an optional reason to UQPAY.

2. UQPAY Hosted Checkout

The customer’s browser is redirected to UQPAY’s hosted checkout page where they select their preferred payment method (card or QR code) and complete the transaction. Card details (PAN, CVV, expiry) are entered directly on UQPAY’s PCI DSS-compliant page and never touch the merchant’s server.

• Live endpoint: https://checkout.uqpay.com
• Sandbox/test endpoint: https://checkout-sandbox.uqpaytech.com

The redirect URL includes a client_secret parameter that authenticates the payment session. This token is scoped to a single Payment Intent, is short-lived, and cannot be used to initiate new charges or access account-level data.

3. UQPAY Webhook Notifications

UQPAY sends asynchronous webhook notifications from its servers to your site at https://yourstore.com/wc-api/uqpay_webhook to confirm payment outcomes (succeeded, failed, refunded). These callbacks are verified using HMAC-SHA512 signatures derived from the merchant’s webhook secret.

Service provider details and legal documents

• Provider: UQPAY Pte. Ltd.
• Website: https://www.uqpay.com
• Terms of Service: https://uqpay.com/en/company/terms?id=general-terms-and-conditions
• Privacy Policy: https://uqpay.com/en/company/terms?id=privacy-policy

By using this plugin, you and your customers agree to the UQPAY Terms of Service and Privacy Policy linked above.