Description
Fintoc for WooCommerce lets your store accept account-to-account bank transfers, card payments and, in Mexico, cash payments at stores through Fintoc.
When a customer places an order, the plugin creates a Fintoc Checkout Session and redirects the customer to Fintoc’s secure hosted checkout, where they pick their payment method and authorize the payment. The order is then confirmed in the background through webhook events; each event triggers a lookup against the Fintoc API, which is the source of truth for payment status.
Features
- Hosted, redirect-based checkout — no card data ever touches your server.
- Works with both the classic checkout shortcode and the new Blocks (Store API) checkout.
- HPOS (High-Performance Order Storage) compatible.
- API-verified webhooks — no webhook secret to configure — with replay protection and idempotent processing.
- Refunds initiated directly from the WooCommerce order screen.
- Separate test and live API keys, with an explicit test-mode toggle.
- Supports Chilean Pesos (CLP) and Mexican Pesos (MXN).
External services
This plugin relies on the Fintoc API to process payments. It is the only external
service the plugin communicates with, and it is the service this plugin exists to
integrate with.
What it is used for and what data is sent
- When a customer places an order and selects Fintoc, the plugin sends the order
total, the currency, the order number, the order key, and the return URLs of your
store tohttps://api.fintoc.comin order to create a checkout session. The
customer is then redirected to Fintoc’s hosted checkout to authorize the payment. - When Fintoc notifies your store of an event, the plugin sends the identifier
received in the notification back tohttps://api.fintoc.comto read the
authoritative payment status. No customer data is sent in this request. - When you issue a refund from the WooCommerce order screen, the plugin sends the
payment identifier, the refund amount, and the reason you entered.
Every request is authenticated with the secret API key you configure in the plugin
settings, and is made only in response to one of the actions above. The plugin sends
no telemetry, no analytics, and no data to any other destination.
Service provided by Fintoc: site —
terms of service —
privacy policy
Installation
- Go to Plugins > Add New, search for Fintoc for WooCommerce and click Install Now. You can also upload the ZIP from Plugins > Add New > Upload Plugin.
- Activate the plugin through the Plugins menu in WordPress.
- Go to WooCommerce > Settings > Payments > Fintoc.
- Enable the gateway, choose test or live mode, and paste your secret key from the Fintoc dashboard.
- Copy the Webhook endpoint URL shown on the settings page, register it in your Fintoc dashboard, and subscribe to the
payment_intent.*,checkout_session.*andrefund.*events. - Place a test order to confirm the full round-trip.
FAQ
-
Which currencies are supported?
-
Chilean Pesos (CLP) and Mexican Pesos (MXN). The gateway hides itself automatically when the store currency is anything else.
-
Do I need to expose a webhook?
-
Yes. Webhooks are how Fintoc confirms payments. The plugin shows the exact endpoint URL to register on the settings screen. No webhook secret is needed: the plugin verifies every event by fetching the payment state directly from the Fintoc API before updating an order.
-
What does the checkout show?
-
Leave the Title and Description settings empty: the title then names the payment methods enabled for your Fintoc organization (for example “Pay with SPEI, card or cash”) and shows one logo per method. A title or description you write is always shown as is.
-
How do cash payments work?
-
In Mexico, the customer can pay in cash at a store with a voucher. The order stays on hold, with its stock reserved, until the customer pays or the checkout session expires (24 hours by default). The order received page shows a link to the voucher.
-
Is the Blocks checkout supported?
-
Yes. Both the classic shortcode checkout and the Blocks/Store API checkout are supported.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Fintoc for WooCommerce” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Fintoc for WooCommerce” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.2.5
- The checkout title names the payment methods enabled for your Fintoc organization, for example “Pay with SPEI, card or cash”, when the Title setting is empty. A title you write is kept.
- The checkout shows one logo per payment method: bank transfer (Chilean banks or SPEI), cards, and cash stores in Mexico.
- The default description no longer names payment methods, so it never contradicts the title.
- Orders record “Fintoc” as the payment method, and the admin shows “Fintoc” as the gateway name.
- After generating a cash voucher, the customer sees a notice with a link to the voucher on the order received page, including when returning through the back to store link.
- A paid order is no longer marked as failed or on hold by a late event from an earlier payment attempt, even when the store moved it to a custom status.
- Two simultaneous events for the same payment no longer move the order’s stock twice.
1.2.4
- Orders are no longer cancelled while Fintoc is still validating the payment: a bank transfer that takes longer than the hold-stock window (60 minutes by default) now waits in On hold, with its stock reserved, instead of being cancelled after the money was already collected.
- Stock reserved by a validating payment is restored when the payment fails.
- A validating payment is polled against the Fintoc API as a fallback, so an order whose confirmation webhook was never delivered still resolves on its own.
- An expiring checkout session no longer cancels an order that has another payment still being validated.
- A second payment succeeding for an order that was already paid now leaves an order note and emails the store admin, so the duplicate can be refunded.
- Customers receive WooCommerce’s standard order on-hold email when their payment enters validation. It can be turned off under WooCommerce > Settings > Emails.
1.2.3
- Fixed checkout failing with “Unrecognized request: POST /v2/checkout_sessions” on Fintoc organizations pinned to an API version older than 2026-02-01: requests now send the Fintoc-Version header.
1.2.2
- A payment made in an earlier Fintoc checkout session is no longer lost when the customer goes back to the checkout and a second session is created.
- An expiring checkout session no longer cancels an order whose payment is still being confirmed by Fintoc.
1.2.1
- Two Fintoc webhooks arriving at once for the same order can no longer confirm it twice, which duplicated the stock reduction, the order notes and the customer emails.
- A payment that WooCommerce fails to complete is now retried instead of being acknowledged, so the order no longer stays unpaid after the money was captured.
- The order-received page no longer says the payment is still being confirmed when the webhook already confirmed it.
- The gateway icon now matches the payment methods enabled for the organization, at a readable size, on both the classic and the Blocks checkout.
- Checkout sessions no longer send the customer object.
1.2.0
- SmartCheckout: sessions no longer pin bank_transfer — the Fintoc-hosted checkout offers every payment method enabled for the organization (bank transfer, cards).
- Test mode now defaults to off.
- Refund hardening: settings now instruct subscribing to refund.* events; reverting a failed refund reverses restocked inventory and restores the order’s real pre-refund status; the customer is notified when a refund is reverted; Dashboard-created refunds are reconciled into WooCommerce; canceled refunds revert like failed ones; refund webhooks validate that the refund belongs to the order; permanent API errors no longer cause endless webhook retries; cross-mode refunds and over-precise partial amounts fail early with clear messages.
1.1.0
- Webhooks are now verified against the Fintoc API instead of an HMAC signature: the payload only locates the order and every state change comes from an authenticated API lookup. The webhook endpoint secret settings were removed — no secret to configure.
- Checkout sessions are created with
payment_method_types: bank_transfer, skipping Fintoc’s method selector so the checkout matches what the gateway promises. - Embedded payments are now read from the documented
payment_resource.payment_intentshape of the checkout session, fixing immediate confirmation on return and thecheckout_session.finishedsafety net. - Refund outcomes are reconciled asynchronously:
refund.succeededconfirms the refund, andrefund.failedreverts the WooCommerce refund, restores the order status and emails the store admin.
1.0.0
- Initial release: hosted checkout, webhooks, refunds, Blocks support, HPOS compatibility.