Title: F2M Pay for WooCommerce
Author: f2mpay
Published: <strong>July 21, 2026</strong>
Last modified: July 21, 2026

---

Search plugins

![](https://ps.w.org/f2m-pay-for-woocommerce/assets/banner-772x250.jpg?rev=3618595)

![](https://ps.w.org/f2m-pay-for-woocommerce/assets/icon-128x128.jpg?rev=3616561)

# F2M Pay for WooCommerce

 By [f2mpay](https://profiles.wordpress.org/f2mpay/)

[Download](https://downloads.wordpress.org/plugin/f2m-pay-for-woocommerce.3.1.3.zip)

 * [Details](https://wordpress.org/plugins/f2m-pay-for-woocommerce/#description)
 * [Reviews](https://wordpress.org/plugins/f2m-pay-for-woocommerce/#reviews)
 *  [Installation](https://wordpress.org/plugins/f2m-pay-for-woocommerce/#installation)
 * [Development](https://wordpress.org/plugins/f2m-pay-for-woocommerce/#developers)

 [Support](https://wordpress.org/support/plugin/f2m-pay-for-woocommerce/)

## Description

F2M Pay for WooCommerce is a comprehensive payment gateway plugin that enables your
WooCommerce store to accept cryptocurrency payments. This plugin goes beyond basic
payment processing by offering advanced features including profit sharing, automated
refund management, and support for multiple signature methods.

#### Key Features

 * **Multiple Cryptocurrency Support** – Accept payments in various cryptocurrencies
   supported by F2M Pay
 * **Advanced Profit Sharing** – Automatically split payments between multiple parties(
   merchant, TSP, distributor)
 * **Smart Refund Orchestration** – State machine-based refund processing with automatic
   commission clawback
 * **Multi-Signature Methods** – Supports HMAC-SHA256, HMAC-SHA512, and RSA signature
   algorithms
 * **Channel Partner Support** – Built-in support for channel partner/sub-merchant
   configurations
 * **Express Checkout** – Quick checkout buttons on product and cart pages
 * **HPOS Compatible** – Full support for WooCommerce High-Performance Order Storage
 * **Centralized Management** – Optional centralized database for multi-store management
 * **Comprehensive Logging** – Detailed transaction, webhook, and refund logs for
   debugging
 * **Secure Credential Storage** – AES-256-CBC encryption for sensitive API credentials

#### Payment Flow

 1. Customer selects F2M Pay at checkout
 2. Order is created and customer is redirected to F2M Pay checkout
 3. Customer completes payment using their F2M account
 4. Webhook confirms payment and order is automatically completed
 5. If profit sharing is enabled, commissions are automatically distributed
 6. Refunds trigger automatic commission clawback and customer refund

#### Requirements

 * WordPress 6.0 or higher
 * WooCommerce 7.0 or higher
 * PHP 7.4 or higher
 * MySQL 5.7 or higher
 * SSL certificate (HTTPS required)
 * F2M account with API credentials

#### Documentation & Support

For documentation and support, please visit [F2M Labs](https://www.f2mlabs.com/)
or contact us at contact@f2mlabs.com.

### Security

This plugin implements multiple security measures:

 * AES-256-CBC encryption for API credentials
 * Prepared statements for all database queries
 * Input sanitization and output escaping
 * Nonce verification for AJAX requests
 * Capability checks for admin functions
 * HTTPS requirement for webhooks
 * Signature verification for payment webhooks
 * Security headers on API endpoints

If you discover a security vulnerability, please email security@f2mlabs.com

### External Services

This plugin connects to external third-party services to process payments. By using
this plugin, you agree to the terms and privacy policies of these services.

#### F2M Pay API

This plugin sends data to the F2M Pay API (the payment gateway API) to create and
process cryptocurrency payments.

**Data sent:**
 * Order number and amount * Currency and fiat currency * Merchant
ID and API credentials (server-to-server only)

**When data is sent:**
 * When a customer initiates a payment at checkout * When
querying payment or refund status * When processing refunds

 * [F2M Pay Terms of Service](https://www.f2mlabs.com/terms-of-service)
 * [F2M Pay Privacy Policy](https://www.f2mlabs.com/privacy-policy)

#### Centralized Management API (Optional)

If configured by the store administrator, this plugin can optionally connect to 
a centralized management API to synchronize transaction data across multiple stores.
This feature is **disabled by default** and requires the administrator to explicitly
configure the API endpoint and key in the plugin settings.

**Data sent (when enabled):**
 * Transaction records (order ID, amount, currency,
status) * Webhook logs * Refund records * Store URL and Merchant ID

**Data NOT sent:**
 * F2M API Secret (never transmitted) * Customer personal information*
Payment card or wallet details

This feature can be fully disabled by leaving the “Central API Endpoint” and “Central
API Key” fields empty in the plugin settings.

#### DPT Pay API

This plugin supports DPT Pay as an alternative cryptocurrency payment gateway.

**Data sent:**
 * Order number and amount * Currency * Merchant ID (server-to-server
only)

**When data is sent:**
 * When a customer selects DPT Pay at checkout * When querying
payment status * When processing refunds

### Privacy Policy

This plugin:

 * Stores transaction data (order amounts, trade numbers, statuses) in your WordPress
   database
 * Sends order information (order number, amount, currency) to F2M Pay API for payment
   processing
 * Optionally sends transaction and webhook data to a centralized management API
   if explicitly configured by the administrator
 * Does not send customer personal data (name, email, address) to any third party
 * Does not store or transmit F2M API Secrets to any external service
 * Complies with GDPR requirements for data handling

For more information, see our [Privacy Policy](https://www.f2mlabs.com/privacy-policy)

### Credits

Developed by F2M Labs
 https://www.f2mlabs.com

### License

This plugin is licensed under GPLv3 or later.
 https://www.gnu.org/licenses/gpl-
3.0.html

## Screenshots

[⌊Payment Providers - F2M Pay active in WooCommerce payment settings⌉⌊Payment Providers-
F2M Pay active in WooCommerce payment settings⌉[

Payment Providers – F2M Pay active in WooCommerce payment settings

[⌊Gateway Settings - API Key, Secret, and Test Mode configuration⌉⌊Gateway Settings-
API Key, Secret, and Test Mode configuration⌉[

Gateway Settings – API Key, Secret, and Test Mode configuration

[⌊Checkout Page - Pay with Crypto option at checkout⌉⌊Checkout Page - Pay with Crypto
option at checkout⌉[

Checkout Page – Pay with Crypto option at checkout

[⌊Payment Page - Choose network (Solana, Ethereum, Polygon)⌉⌊Payment Page - Choose
network (Solana, Ethereum, Polygon)⌉[

Payment Page – Choose network (Solana, Ethereum, Polygon)

[⌊Payment Details - QR code, wallet address, and Connect Wallet option⌉⌊Payment 
Details - QR code, wallet address, and Connect Wallet option⌉[

Payment Details – QR code, wallet address, and Connect Wallet option

## Installation

#### Automatic Installation

 1. Log in to your WordPress admin panel
 2. Navigate to Plugins > Add New
 3. Search for “F2M Pay for WooCommerce”
 4. Click “Install Now” and then “Activate”

#### Manual Installation

 1. Download the plugin ZIP file
 2. Extract the ZIP file
 3. Upload the `f2m-pay-woocommerce` folder to `/wp-content/plugins/`
 4. Activate the plugin through the ‘Plugins’ menu in WordPress

#### Configuration

 1. Navigate to WooCommerce > F2M Pay
 2. Click on “Merchant Config” tab
 3. Enter your F2M API credentials:
 4.  * Merchant ID
     * API Key
     * API Secret
     * Select signature method (HMAC-SHA512 recommended)
 5. Configure webhook URL in your F2M dashboard
 6. Go to “Settings” tab and enable F2M Pay
 7. Test the payment flow with a small transaction

For detailed setup instructions, see the [Installation Guide](https://wordpress.org/plugins/f2m-pay-for-woocommerce/INSTALLATION.md?output_format=md)
included with the plugin.

## FAQ

### Do I need a F2M account?

Yes, you need a F2M account to use this plugin. You can apply at https://pay.f2m.
dev

### Which cryptocurrencies are supported?

F2M Pay supports all cryptocurrencies available in your F2M account, including BTC,
ETH, USDT, BUSD, BNB, and many others.

### Is SSL required?

Yes, SSL (HTTPS) is required for webhook functionality and secure payment processing.

### How do refunds work?

Refunds are processed through an intelligent state machine that:
 1. Claws back 
commissions from profit sharing recipients (if applicable) 2. Processes the refund
through F2M Pay 3. Updates the WooCommerce order status 4. Provides detailed logging
of each step

### Can I use this for multiple stores?

Yes, the plugin includes centralized database support for managing multiple stores
from a single API endpoint.

### What signature methods are supported?

The plugin supports:
 * HMAC-SHA512 (recommended) * HMAC-SHA256 * RSA with certificate-
based signing

### Is this plugin compatible with WooCommerce Blocks?

Yes, the plugin includes full support for WooCommerce Checkout Blocks.

### Where can I find my webhook URL?

Navigate to WooCommerce > F2M Pay > Integration tab to find your webhook URLs.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“F2M Pay for WooCommerce” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ f2mpay ](https://profiles.wordpress.org/f2mpay/)
 *   [ f2mlabs ](https://profiles.wordpress.org/f2mlabs/)

[Translate “F2M Pay for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/f2m-pay-for-woocommerce)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/f2m-pay-for-woocommerce/),
check out the [SVN repository](https://plugins.svn.wordpress.org/f2m-pay-for-woocommerce/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/f2m-pay-for-woocommerce/)
by [RSS](https://plugins.trac.wordpress.org/log/f2m-pay-for-woocommerce/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 3.1.0 – 2026-07-13

 * **Security:** Webhook signature verification now rejects requests when webhook_secret
   is not configured
 * **Security:** SSL verification enabled for test mode loopback requests (with 
   WP_DEBUG fallback)
 * **Security:** All webhook JSON payloads sanitized after json_decode via map_deep
 * **Security:** SVG output wrapped with wp_kses() using custom allowed tags
 * **Improved:** All inline CSS/JS extracted to separate enqueued files (14 instances)
 * **Improved:** All script/style handles prefixed with f2m-bpay-
 * **Improved:** JS variable escaping with esc_js() and esc_url() in templates
 * **Improved:** $_GET parameters sanitized with sanitize_key() instead of bare 
   isset()
 * **Fixed:** wp_localize_script variable name mismatch (binancePayExpress  f2mBpayExpress)
 * **Fixed:** Translation file names updated to match new text domain
 * **Fixed:** Removed hardcoded test domain (kongfuearpods)
 * **Fixed:** Removed error_reporting() override
 * **Fixed:** Removed “powered by F2M” from customer-facing gateway description
 * **Updated:** Tested up to WordPress 7.0
 * **Updated:** Added Requires Plugins: woocommerce header
 * **Updated:** Added WC requires/tested headers to readme.txt
 * **Updated:** Contributors updated to f2mpay, f2mlabs
 * **Updated:** All f2mlabs.com links verified and corrected

#### 3.0.0 – 2026-07-08

 * **Breaking:** Plugin files renamed from binance-* to f2m-* (legacy stub included
   for compatibility)
 * **Breaking:** Text Domain changed to f2m-pay-for-woocommerce
 * **Improved:** Removed all error_log() calls, replaced with WC Logger
 * **Improved:** All user-visible Binance branding replaced with F2M Pay
 * **Fixed:** Unprepared SQL queries now use $wpdb->prepare()
 * **Fixed:** Removed reference to non-existent class-binance-api.php
 * **Added:** LICENSE file

#### 2.4.1 – 2026-07-08

 * **Improved:** Replaced plugin-level “F2M Pay” branding with “F2M Pay” in order
   notes and debug logs
 * **Improved:** Updated readme.txt plugin title to “F2M Pay for WooCommerce”

#### 2.4.0 – 2026-07-08

 * **New:** WooCommerce Block Checkout support for DPT Pay gateway
 * **Improved:** Block Checkout script dependency declarations (blocks.asset.php)
 * **Improved:** Defensive checks in blocks.js for missing global objects
 * **Improved:** Payment method icons in Block Checkout display
 * **Fixed:** String ‘1’ value handling in Block gateway enabled check

#### 2.3.3 – 2026-07-05

 * **Improved:** Auto-send webhookUrl when creating payment orders
 * **Improved:** i18n support for gateway method description

#### 2.3.2 – 2026-07-01

 * **Improved:** i18n support for test payment page — all user-facing text now uses
   WordPress translation functions
 * **Improved:** i18n support for test payment handler — error messages and order
   notes now translatable
 * **Updated:** Chinese (zh_CN) translation files with all new strings

#### 2.0.0 – 2026-01-05

 * **New:** Advanced profit sharing with automatic commission distribution
 * **New:** Refund state machine with intelligent orchestration
 * **New:** Commission clawback on refunds
 * **New:** Multi-signature support (HMAC-SHA256, HMAC-SHA512, RSA)
 * **New:** Channel partner/sub-merchant support
 * **New:** Express checkout buttons
 * **New:** Centralized database for multi-store management
 * **New:** Comprehensive admin interface with tabs
 * **New:** WooCommerce Blocks integration
 * **Improved:** Security with AES-256-CBC credential encryption
 * **Improved:** HPOS compatibility
 * **Improved:** Webhook handling and logging
 * **Improved:** Error handling and logging
 * **Fixed:** SSL verification in API calls
 * **Fixed:** Input sanitization and output escaping
 * **Fixed:** Database query security

#### 1.0.0 – 2025-12-01

 * Initial release
 * Basic F2M Pay integration
 * Simple payment processing
 * Basic refund support

## Meta

 *  Version **3.1.3**
 *  Last updated **5 days ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0.2**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [crypto payments](https://wordpress.org/plugins/tags/crypto-payments/)[cryptocurrency](https://wordpress.org/plugins/tags/cryptocurrency/)
   [payment gateway](https://wordpress.org/plugins/tags/payment-gateway/)[woocommerce](https://wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://wordpress.org/plugins/f2m-pay-for-woocommerce/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/f2m-pay-for-woocommerce/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/f2m-pay-for-woocommerce/reviews/)

## Contributors

 *   [ f2mpay ](https://profiles.wordpress.org/f2mpay/)
 *   [ f2mlabs ](https://profiles.wordpress.org/f2mlabs/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/f2m-pay-for-woocommerce/)