Gateway Wizard with NMI for WooCommerce

Description

Accept credit and debit cards for WooCommerce with your NMI merchant account or any NMI-based provider. Full card numbers never touch your server.

Customers type their card into secure fields served by NMI (Collect.js). The card number goes straight to NMI and comes back as a one-time token, so it never reaches your server. That keeps your PCI compliance work small, instead of the long SAQ D questionnaire that comes with forms that post card numbers to your site.

It works with the block checkout that new WooCommerce stores use, and with the classic shortcode checkout.

Features

  • Block and classic checkout: Works with the WooCommerce checkout block and the classic checkout.
  • Card fields hosted by your gateway: Full card numbers go straight to NMI and never touch your server.
  • Double-charge protection: If the gateway times out, the order is held and checked before the customer can pay again.
  • Full and partial refunds: Refund from the order screen. Unsettled charges are voided automatically.
  • Authorize now, capture later: Capture by hand, or automatically when the order moves to Processing or Completed. Cancelling releases the hold.
  • Choose accepted card brands: Show only the card brands your merchant account takes.
  • Address and CVV results in order notes: See each order’s address and security code checks without leaving WooCommerce.
  • Order details sent to your gateway: Line items, shipping address and your statement descriptor appear in NMI’s reports.
  • Gateway email receipts: Have NMI send its own receipt to customers.
  • Safe debug log: Keys and card data are removed before anything is logged.
  • 260+ NMI-based providers: Choose your merchant services company from the list, or paste your gateway login address.

Pro

Pro adds saved cards, WooCommerce Subscriptions and Pre-Orders, bank account (ACH) payments, 3D Secure where your gateway offers it, and support for popular WooCommerce extensions, with priority email support. Pro uses the same settings, so upgrading keeps your setup.

Learn more about Pro

What you need

  • A merchant account with NMI.
  • Two keys from your NMI account, under Settings > Security Keys: a private key with API access, and a public key with Tokenization access.
  • WooCommerce 11.0 or newer and PHP 8.1 or newer.

Need a merchant account? Apply with Easy Pay Direct. Disclosure: this is a referral link, and Gateway Wizard may be paid a referral fee if you open an account through it. It costs you nothing extra.

External services

This plugin connects to these services:

NMI, or the NMI-based gateway of your merchant account provider, processes the payments. Many merchant account providers run their payment gateway on the NMI platform under their own name and web address. The plugin includes a list of these providers, each with the gateway address its merchants use. You choose yours under Merchant account provider in the payment settings, or choose Other and enter your gateway address yourself, and the settings screen shows the address payments will go to. The plugin only ever contacts that one gateway.

At checkout, the card fields load from the gateway’s server in the customer’s browser, and the card number, expiration date and security code go straight there, never through your site. When an order is placed, captured, refunded or voided, the plugin sends the gateway your API keys, the amount and currency, the order number, the customer’s billing and shipping details, email address and IP address, and, if you turn them on in the settings, the order’s line items, your statement descriptor and a request for the gateway to email the customer a receipt.

NMI: Terms, privacy policy. If your gateway belongs to another provider, that provider’s own terms and privacy policy, which you accepted when you opened your merchant account, also apply.

Freemius handles the opt-in and the upgrade to Pro. When you activate the plugin, it asks whether you’d like to opt in. You can skip, and the plugin works the same either way. If you opt in, Freemius receives what its opt-in screen lists: your name and email address, your site’s address and title, your WordPress and PHP versions and site language, the plugin’s version and whether it’s active, and, unless you switch it off, the names and versions of your installed plugins and themes, and Gateway Wizard may email you about plugin updates, security notices and occasional offers. Freemius is also contacted if you start an upgrade, or if you send the feedback form shown when you deactivate the plugin. Terms, privacy policy.

Installation

  1. Install and activate the plugin.
  2. Go to WooCommerce > Settings > Payments and open NMI.
  3. Paste in your private security key and public tokenization key.
  4. Choose whether to charge right away or authorize and capture later, then save.
  5. Place a test order. If your account is live, turn on Test mode first so no real charge is made.

FAQ

Where do I find my keys?

Log in to your NMI account and open Settings > Security Keys. Add a private key with API permission, and a public key with Tokenization permission. The plugin signs in with keys only, never your account username and password.

Can I test without charging a real card?

Yes. With a sandbox account, check “Sandbox account”. With a live account, check “Test mode” and use test card numbers such as 4111 1111 1111 1111.

Do card numbers touch my server?

No. Full card numbers and security codes go from the shopper’s browser straight to NMI. Your site receives a one-time token, the card type, the expiry date and a masked number (first six and last four digits). It keeps only the last four digits with each order, for refunds and order records. With Pro’s saved cards, it also keeps the card type and expiry, while the card itself is stored at NMI.

How do refunds work?

Refund from the order screen as usual, in full or in part. A charge that has not settled yet can only be voided, so a full refund of an unsettled charge is sent as a void automatically.

My gateway gave me a different web address. Can I use it?

Yes. Many payment companies run on the same platform under their own name. Enter the address they gave you under Troubleshooting > Gateway address.

Can I run two of these gateways on one store?

Only one gateway that uses Collect.js can be active on a checkout page. If you enable two, the first one is used and the other shows a notice in your dashboard.

Can customers pay from a bank account?

Yes, with Pro. Pro adds a “Bank account (ACH)” payment option for US checking and savings accounts. Your NMI account must be approved for ACH (often called check or eCheck processing). Account and routing numbers are typed into secure fields hosted by NMI, so they never touch your server, and bank payments can be refunded from the order screen like cards.

Does it support 3D Secure?

Yes, with Pro. Turn on 3D Secure in the payment settings and the customer’s bank verifies each new card before it is charged; most customers see no extra step. NMI must first turn on Payer Authentication (3D Secure 2) for your account, and your public key needs Checkout permission.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Gateway Wizard with NMI for WooCommerce” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.2.0 – 2026-11-06

  • New: Added a link to apply for a merchant account on the payment settings screen.
  • New: Added PayTran Merchant Services and WSP Gateway to the Merchant account provider list.

1.1.0 – 2026-10-28

  • Security: Updated the Freemius SDK to 2.13.5, which hardens the opt-in screen and admin notices.

1.0.2 – 2026-10-18

  • Improved: Renamed to Gateway Wizard with NMI for WooCommerce.

1.0.1 – 2026-10-18

  • Improved: Upgrade to Pro without leaving your dashboard.

1.0.0 – 2026-10-16

  • Initial release.