Ecommerce Checkout

1. Introduction

With PayWay eCommerce Checkout, you can easily accept payments on your website or mobile app. This solution lets your customers pay quickly and securely using Credit/Debit Cards, ABA Pay & KHQR (via ABA Mobile or other KHQR-supported banking apps), WeChat Pay or Alipay — to give them a seamless and secure checkout experience.

Common Use Cases

Online shopping – Accept payments for products and services.

Wallet top-ups & digital services – Let users add funds or pay for digital services.

Subscriptions & bills – As a checkout to process recurring payments and utility bills.

On-demand services – Handle payments for food delivery, ride-hailing, and more.

Event bookings – Enable seamless ticket and reservation payments

2. How it works

The customer selects a product or service and clicks "Pay".

They choose a payment method, and a checkout modal appears.

The customer completes payment with their chosen method (credit/debit cards, ABA Pay, KHQR, WeChat Pay, Alipay, or Google Pay).

Once the payment is processed, your system receives a pushback notification with the payment status.

Your system verifies the payment and confirms the order.

Selling on an eCommerce platform? See our eCommerce Checkout Plugins instead!

3. Set up your payment selection UI

To ensure a smooth payment experience, your platform must include UI to accommodate the online payment acceptance. This includes:

A section where customers can choose a payment options they want to pay with.

A "We Accept..." area that shows the payment options you offer.

You must follows PayWay eCommerce checkout guidelines to ensure seamless customer payments.

Web UI Guidelines

To accept payments on your website

Mobile UI Guidelines

To accept payments on your app or web app

4. Integration Steps

Before you start, make sure you have the following:

PayWay Sandbox Account – Register here to test transactions.

Sandbox Merchant ID & API Key—You’ll receive these via email after registering for the sandbox.

To integrate online payments on your website or mobile app, follow these steps:

Create a Payment Transaction

When the customer selects "Pay" and chooses a payment method, call the Create Transaction API to generate a transaction and display it on your platform.

Sample Request

<html lang="en">
  <head>
    <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" />
      
    <!-- Remove PayWay Plugin JS if you prefer Hosted view mode. This URL is valid for both Sanbdbox and Production -->
    <script src="https://checkout.payway.com.kh/plugins/checkout2-0.js" defer></script>
      
  </head>
  <body>
    <form method="POST" target="aba_webservice" id="aba_merchant_request"
      action="https://checkout-sandbox.payway.com.kh/api/payment-gateway/v1/payments/purchase" >
      <input type="hidden" name="hash" value="D8SaUWAA/AhxNro00wAykb4ibeo9kM3if7ioN7cnBfihXP/38anLGwGUxHK+J6HvaiUEV8Ho+nz5nkQrzowm7g==" />
      <input id="tran_id" type="hidden" name="tran_id" value="17536691884" /><br />
      <input type="hidden" name="amount" value="0.10" />
      <input type="hidden" name="merchant_id" value="ec000002" />
      <input type="hidden" name="req_time" value="20250728022056" />

      <input type="hidden" id="payment_option" name="payment_option" value="" />

      <input type="hidden" name="currency" value="" />

      <input type="hidden" name="firstname" value="sina" />
      <input type="hidden" name="lastname" value="chhum" />
      <input type="hidden" name="phone" value="093939399" />
      <input type="submit" value="submit" />
    </form>

    <script>
      var form = document.getElementById('aba_merchant_request')
      form.addEventListener('submit', function (event) {
        event.preventDefault()
        AbaPayway.checkout() // Use it with PayWay Plugin JS to display as a bottom sheet on mobile or a modal popup on desktop // document.getElementById(form_id).submit() // Use it to display as Hosted view mode
      })
    </script>
  </body>
</html>

PayWay will respond with a HTML response that contains the checkout interface, which you must render on your website/platform for the customer to complete the payment.

Web

WAP/Mobile

Sample Response (Varies Based on Payment Method):

Payment method responses

Verify Payment Status

Use the Check Transaction API to confirm whether a payment was successful.
After you create a payment, call the API with the transaction ID to check its status. Please respect the rate limit of 600 requests per second and stop checking once a result is returned.
For response details and error explanations, see the API guide here:
Check transaction API

(Optional) Handle Callback URL for payment status updates

Once the customer completes the payment, PayWay will send the transaction details and other important information to the return_url.

If return_url is not provided in the request, PayWay will use the default return_url configured in the API Settings.

If you provide a custom return_url, make sure the domain is whitelisted in your merchant profile.

Your return_url endpoint must:

Accept the HTTP POST method

Accept Content-Type: application/json

💡

We highly recommend securing this URL to ensure that only PayWay has access to it.

Sample Pushback Data

{
    "tran_id": "17425401324",
    "apv": "619195",
    "status": "0", 
    "return_params": "xxxxxxxxxx"
}

tran_id string
Transaction ID sent during the initial payment process.

apv string
Transaction approval code.

status string
Payment status

return_params string
Extra information sent to the payment gateway during the payment initiation request.

Verify Callback Signature

For security purposes, PayWay includes a hash signature in the request header.
You should verify this signature to confirm that the callback was sent by PayWay and that the data has not been modified.

Below is an example in PHP demonstrating how to:

Read the callback data

Generate the signature

Compare it with the signature received in the header

PHP Example

 // Read request body
$response = json_decode(file_get_contents('php://input'), true);

$secretKey = "YOUR_SECRET_KEY";

// 1. Sort fields by key (ascending)
ksort($response);

// 2. Concatenate all values
$b4hash = '';
foreach ($response as $value) {
 if (is_array($value)) {
     $value = json_encode($value);
 }
 $b4hash .= $value;
}

// 3. Generate HMAC-SHA512 signature
$signature = base64_encode(
 hash_hmac('sha512', $b4hash, $secretKey, true)
);

// 4. Get signature from request header
$receivedSignature = $_SERVER['HTTP_X_PAYWAY_HMAC_SHA512'] ?? '';

// 5. Compare signatures
if (hash_equals($signature, $receivedSignature)) {
 // Valid request – process the notification
} else {
 // Invalid request
 http_response_code(401);
 exit('Invalid signature');
}

1. Introduction#

2. How it works#

3. Set up your payment selection UI#

4. Integration Steps#

1. Introduction

2. How it works

3. Set up your payment selection UI

4. Integration Steps