Ecommerce Checkout

1. Introduction

With PayWay eCommerce Checkout, you can easily accept payments on your website or mobile app. This solution lets your customers pay quickly and securely using Credit/Debit Cards, ABA Pay & KHQR (via ABA Mobile or other KHQR-supported banking apps), WeChat Pay or Alipay — to give them a seamless and secure checkout experience.

Common Use Cases

Online shopping – Accept payments for products and services.

Wallet top-ups & digital services – Let users add funds or pay for digital services.

Subscriptions & bills – As a checkout to process recurring payments and utility bills.

On-demand services – Handle payments for food delivery, ride-hailing, and more.

Event bookings – Enable seamless ticket and reservation payments

2. How it works

The customer selects a product or service and clicks "Pay".

They choose a payment method, and a checkout modal appears.

The customer completes payment with their chosen method (credit/debit cards, ABA Pay, KHQR, WeChat Pay, Alipay, or Google Pay).

Once the payment is processed, your system receives a callback notification with the payment status.

Your system verifies the payment and confirms the order.

Selling on an eCommerce platform? See our eCommerce Checkout Plugins instead!

3. Set up your payment selection UI

To ensure a smooth payment experience, your platform must include UI to accommodate the online payment acceptance. This includes:

A section where customers can choose a payment options they want to pay with.

A "We Accept..." area that shows the payment options you offer.

You must follows PayWay eCommerce checkout guidelines to ensure seamless customer payments.

Web UI Guidelines

To accept payments on your website

Mobile UI Guidelines

To accept payments on your app or web app

4. Integration Steps

Before you start, make sure you have the following:

PayWay Sandbox Account – Register here to test transactions.

Sandbox Merchant ID & API Key—You’ll receive these via email after registering for the sandbox.

To integrate online payments on your website or mobile app, follow these steps:

Create a Payment Transaction

When the customer selects "Pay" and chooses a payment method, call the Create Transaction API to generate a transaction and display it on your platform.

Sample Request

<html lang="en">
  <head>
    <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no" />
      
    <!-- Remove PayWay Plugin JS if you prefer Hosted view mode. This URL is valid for both Sanbdbox and Production -->
    <script src="https://checkout.payway.com.kh/plugins/checkout2-0.js" defer></script>
      
  </head>
  <body>
    <form method="POST" target="aba_webservice" id="aba_merchant_request"
      action="https://checkout-sandbox.payway.com.kh/api/payment-gateway/v1/payments/purchase" >
      <input type="hidden" name="hash" value="D8SaUWAA/AhxNro00wAykb4ibeo9kM3if7ioN7cnBfihXP/38anLGwGUxHK+J6HvaiUEV8Ho+nz5nkQrzowm7g==" />
      <input id="tran_id" type="hidden" name="tran_id" value="17536691884" /><br />
      <input type="hidden" name="amount" value="0.10" />
      <input type="hidden" name="merchant_id" value="ec000002" />
      <input type="hidden" name="req_time" value="20250728022056" />

      <input type="hidden" id="payment_option" name="payment_option" value="" />

      <input type="hidden" name="currency" value="" />

      <input type="hidden" name="firstname" value="sina" />
      <input type="hidden" name="lastname" value="chhum" />
      <input type="hidden" name="phone" value="093939399" />
      <input type="submit" value="submit" />
    </form>

    <script>
      var form = document.getElementById('aba_merchant_request')
      form.addEventListener('submit', function (event) {
        event.preventDefault()
        AbaPayway.checkout() // Use it with PayWay Plugin JS to display as a bottom sheet on mobile or a modal popup on desktop // document.getElementById(form_id).submit() // Use it to display as Hosted view mode
      })
    </script>
  </body>
</html>

PayWay will respond with a HTML response that contains the checkout interface, which you must render on your website/platform for the customer to complete the payment.

Web

WAP/Mobile

Sample Response (Varies Based on Payment Method):

Payment method responses

Verify Payment Status

Use the Check Transaction API to confirm whether a payment was successful.
After you create a payment, call the API with the transaction ID to check its status. Please respect the rate limit of 600 requests per second and stop checking once a result is returned.
For response details and error explanations, see the API guide here:
Check transaction API

(Optional) Handle Callback URL for payment status updates

Once the customer completes the payment, PayWay will send the transaction details and other important information to the return_url.

If return_url is not provided in the request, PayWay will use the default return_url configured in the API Settings.

If you provide a custom return_url, make sure the domain is whitelisted in your merchant profile.

Your return_url endpoint must:

Accept the HTTP POST method

Accept Content-Type: application/json

💡

We highly recommend securing this URL to ensure that only ABA PayWay has access to it.

Sample Callback Response

{
    "tran_id": "9065703303",
    "apv": "544415",
    "status": "0",
    "return_params": "{\"order_id\":\"123\",\"amount\":100,\"client_id\":\"1234567890\"}",
    "original_amount": 0.01,
    "original_currency": "USD",
    "payment_amount": 0.01,
    "payment_currency": "USD",
    "total_amount": 0.01,
    "discount_amount": 0,
    "transaction_date": "2026-08-03 13:57:20",
    "first_name": "",
    "last_name": "",
    "email": "",
    "phone": "",
    "bank_ref": "100FT40074059022",
    "payment_type": "ABA Pay",
    "payer_account": "003471222",
    "bank_name": "",
    "card_source": ""
  }

tran_id string
Payment transaction ID generated by the payment gateway.
Max. Length: 20

apv string
Transaction approval code.
Length: 6

status string
Request status code.
Value: 0

return_params string
Additional return parameters encoded as a string containing order details and metadata.

original_amount number
Original transaction amount before discount.

original_currency string
Original transaction currency.eg. USD or KHR

payment_amount number
Amount that the customer has paid.

payment_currency string
Payment currency that the customer used to pay.
eg. USD or KHR

total_amount number
Amount that customer suppose to pay after discount.

discount_amount number
Discounted amount and its currency follow original currency.

transaction_date string
Created date of the transaction in payment gateway database.
Format: YYYY-MM-DD HH:MM:SS

first_name string
Payer's first name.

last_name string
Payer's last name.

email string
Payer's email.

phone string
Payer's phone number.

bank_ref string
Unique booking entry reference number from ABA Core banking system.

payment_type string
Payment method that the customer used to make payment. Possible values:

ABA Pay — Transaction made with ABA Account (ABA Mobile)

Alipay — Transaction made with Alipay

Wechat — Transaction made with WeChat pay

KHQR — Transaction made with KHQR

VISA — Transaction made with Visa card

MC — Transaction made with Mastercard

JCB — Transaction made with JCB card

CUP — Transaction made with UPI card

payer_account string
Masked ABA Account Number or Masked Card PAN. For other payment options, it will be blank.

bank_name string
If payment is made with ABA PAY, it will show ABA Bank and if payment made using KHQR it will show issuer bank name.

card_source string
Possible values:

ONUS — Transaction is made with ABA bank card

OFFUS_DOMESTIC — Transaction is made with other local bank card

OFFUS_INTERNATIONAL — Transaction is made with other international bank card

Verify Callback Signature

For security purposes, PayWay includes a hash signature in the request header.
You should verify this signature to confirm that the callback was sent by PayWay and that the data has not been modified.

Below is an example in PHP demonstrating how to:

Read the callback data

Generate the signature

Compare it with the signature received in the header

PHP Example

 // Read request body
$response = json_decode(file_get_contents('php://input'), true);

$secretKey = "YOUR_SECRET_KEY";

// 1. Sort fields by key (ascending)
ksort($response);

// 2. Concatenate all values
$b4hash = '';
foreach ($response as $value) {
 if (is_array($value)) {
     $value = json_encode($value);
 }
 $b4hash .= $value;
}

// 3. Generate HMAC-SHA512 signature
$signature = base64_encode(
 hash_hmac('sha512', $b4hash, $secretKey, true)
);

// 4. Get signature from request header
$receivedSignature = $_SERVER['HTTP_X_PAYWAY_HMAC_SHA512'] ?? '';

// 5. Compare signatures
if (hash_equals($signature, $receivedSignature)) {
 // Valid request – process the notification
} else {
 // Invalid request
 http_response_code(401);
 exit('Invalid signature');
}

1. Introduction#

2. How it works#

3. Set up your payment selection UI#

4. Integration Steps#

1. Introduction

2. How it works

3. Set up your payment selection UI

4. Integration Steps