Fosia Pay Lite – PawaPay Mobile Money For WooCommerce Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Fosia Pay Lite is a free WooCommerce payment gateway for Mobile Money in Africa, powered by the PawaPay API. The customer is sent to PawaPay’s secure payment page, picks their operator, approves the payment on their phone, and comes back to your store.
No commission on your sales, ever. The only fees are PawaPay’s own processing fees, agreed directly between you and PawaPay. No limit on the number of payments.
Features
- WooCommerce payment gateway for the classic checkout and the block-based Cart & Checkout
- Works in the countries and with the operators enabled on your PawaPay account (MTN MoMo, Airtel Money, Orange Money, M-Pesa, Moov, Vodacom and more)
- PawaPay hosted payment page: the plugin never sees or stores Mobile Money PINs
- Automatic conversion from your store currency to the customer’s Mobile Money currency
- Amounts follow the decimals and limits set on your PawaPay account
- Payment confirmation you can trust: signed PawaPay callbacks (RFC 9421) are verified, and any unsigned callback is double-checked with PawaPay before an order is marked paid
- Dashboard: volume per currency, success rate and recent payments
- Insights, computed on your site from your own orders: unfinished checkouts at the PawaPay page, failed payments by reason, refunds done by hand
- Sandbox mode for testing before going live
- Compatible with WooCommerce High-Performance Order Storage (HPOS)
- Ready for translation
Fosia Pay Pro
Fosia Pay Pro is a separate, paid plugin by the same team. It adds on-site checkout without redirect, refunds from WooCommerce, payouts, payment links with QR codes, a REST API, and a callback router for several sites on one PawaPay account. Fosia Pay Lite works fully on its own. Learn more.
Requirements
- WooCommerce
- A PawaPay merchant account and API token
External services
PawaPay (payment processor)
The plugin cannot take payments without PawaPay. Requests go to api.pawapay.io (live) or api.sandbox.pawapay.io (sandbox mode), with your PawaPay API token.
- At checkout, when a customer pays with Mobile Money: the plugin reads your account’s amount rules (decimals, minimum and maximum, cached for 1 hour) and creates a PawaPay payment page with the amount and currency, the customer’s country, a short text (“Order 123”), a payment id, your store’s return URL and the checkout language. The customer’s phone number is only sent if you turn on “Pre-fill and lock the Mobile Money number” in the settings (it is then checked with PawaPay’s phone number validation).
- When PawaPay sends a payment result to your callback URL, or when the customer returns to your store: the plugin may ask PawaPay for the payment’s status, and downloads PawaPay’s public signing keys (cached for 12 hours) to verify signed callbacks.
- When you click “Test Connection” in the settings: the plugin reads your PawaPay account configuration.
PawaPay Merchant Terms of Service and Privacy Policy.
ExchangeRate-API (open.er-api.com)
Used only when your store currency differs from the customer’s Mobile Money currency (for example, a EUR store and a customer in Rwanda paying in RWF). At checkout, if no rates are cached, the plugin requests https://open.er-api.com/v6/latest/{store currency}. Only the currency code is sent: no personal, customer or order data. Rates are cached for 12 hours.
ExchangeRate-API Terms of Use and privacy.
Fosia (pay.fosiarw.com) — only if you opt in
Off by default: nothing is sent to Fosia unless an administrator ticks the consent box and clicks “Connect this site” in FosiaPay > Dashboard > “Connect this site to Fosia (optional)”.
- When you connect, then at most once a day, the plugin sends
https://pay.fosiarw.com/wp-json/fosia/v1/heartbeat: a random installation ID created on your site, the plugin name and version, your WordPress and PHP versions and your site language. Fosia uses it to count active installations and decide which WordPress and PHP versions to keep supporting. - When you click “Disconnect”, or delete the plugin while connected: the plugin sends the installation ID with a deletion request, Fosia’s server deletes the record, and the ID is removed from your site.
- Your domain, e-mail address, customers, orders and PawaPay token are never sent (the request uses a neutral user agent, without your site address).
Fosia Terms of Service and Privacy Policy.
No other external request is made. The dashboard and its insights load nothing from outside your site; links to pay.fosiarw.com only open when you click them.
Screenshots
No screenshots provided
