PrestaShop payments
Cardflo provides robust payment processing for PrestaShop merchants. Integrate directly with our platform to manage transactions, optimise payment flows, and reduce declines.
Our solution supports various payment methods and offers advanced fraud prevention tools tailored for PrestaShop environments.
- Category
- Plugins
- Capabilities
- 10
- Available on
- All plans
The overview
PrestaShop merchants manage transaction processing through dedicated payment modules that connect the e-commerce store to an external gateway or acquirer.
These integrations handle the critical handshake between the shopping cart and the payment processor, ensuring that customer card data or alternative payment method instructions are securely transmitted for authorisation.
A typical integration facilitates real-time communication between the PrestaShop environment and the payments stack, allowing for the execution of SCA-compliant authentications via 3DS 2. 0.
By implementing a robust plugin, merchants can manage complex tasks such as partial refunds, transaction captures, and multi-currency settlement directly from the back-office console.
The architecture often includes tokenisation to support recurring billing and merchant-initiated transactions, while also managing the technical requirements of different Merchant Category Codes. High-volume businesses often utilise these integrations to consolidate their payment data and improve reconciliation processes across diverse geographic regions.
How it works
Module Configuration and Installation
The merchant installs the payment module within the PrestaShop administration panel, entering API credentials provided by the PSP.
This link establishes a secure channel for data transmission, ensuring that the checkout page can communicate with the gateway to request authorisations and receive status updates regarding payment success or failure.
Authorisation and SCA Triggering
When a customer initiates a purchase, the module prepares an authorisation request. If the transaction falls under PSD2 mandates, the system triggers the 3D Secure protocol.
The issuer examines the merchant's risk profile and the customer's credentials before granting an authorisation code or issuing a soft decline.
Transaction Capture and Settlement
After successful authorisation, the merchant can configure the module to capture funds immediately or at a later stage, such as upon shipping.
The acquirer processes the capture request, and the funds move into the settlement cycle, eventually deposited into the merchant account after deducting interchange and scheme fees.
Post-Purchase Management
The integration remains active for the entire transaction lifecycle. Within the PrestaShop order management interface, the merchant can trigger full or partial refunds and retrieval responses.
Performance data is synchronised, allowing the store owner to monitor decline reasons and dispute statuses without leaving their primary e-commerce dashboard.
Why it matters
Conversion and Decline Optimisation
Transaction failures often occur due to rigid authentication rules or misaligned MCC configurations. A sophisticated PrestaShop integration allows for the use of smart routing and network tokens, which may help mitigate hard declines and increase the probability of successful authorisations.
By managing 3DS 2. 0 exemptions and utilising account updaters, merchants can potentially reduce checkout friction while maintaining compliance with regional security mandates.
Operational Efficiency and Reconciliation
Managing separate consoles for payments and order fulfilment creates administrative overhead and data silos. Integrating the payments stack directly into PrestaShop allows for manual and automated synchronisation of transaction IDs, ARN numbers, and settlement statuses.
This visibility is essential for precise KYB and AML reporting, as well as for managing rolling reserves and monitoring the impact of interchange-plus pricing on profit margins.
Use cases
International Expansion
A merchant scale-up targeting European and Asian markets can use the integration to offer local APMs and settle in multiple currencies, minimising FX costs and meeting local PSD2 requirements.
Subscription and Continuity Services
Businesses providing recurring goods can utilise tokenisation and Merchant Initiated Transactions to charge saved credentials, supported by dunning processes when cards expire or fail for temporary reasons.
High Volume Retail
Large-scale retailers use the integration to route transactions across multiple MIDs, ensuring that volume limits are respected and that transaction processing continues even if one acquirer experiences downtime.
By the numbers
Merchants moving from legacy modules to those with 3DS 2.0 optimisation and smart routing often observe modest improvements in successful authorisation rates.
Standard industry data suggests that providing local payment methods and a streamlined SCA flow can reduce exit rates at the final payment stage.
Modern API-based integrations typically achieve sub-three-second response times for authorisation requests, depending on the speed of the issuer and acquirer networks.
Related terms
Talk to our team about a live rollout on your acquiring stack.
What you get with PrestaShop payments
- Native support for PrestaShop versions 1.7 through the latest stable releases.
- Integrated 3DS 2.0 framework to manage SCA compliance and liability shift.
- Support for multi-currency processing and local settlement to reduce FX spreads.
- PCI-DSS compliant tokenisation for secure storage of customer payment credentials.
- Management of full and partial refunds directly from the PrestaShop order dashboard.
- Configurable capture delays to align with inventory management and shipping workflows.
- Detailed decline reason code visibility for better analysis of transaction failures.
- Automated dunning and account updater support for recurring billing scenarios.
- Capability to route transactions across different MIDs based on risk or region.
- Support for major card schemes alongside regional alternative payment methods.
A short scoping call, then a written plan for your MIDs.
Questions about PrestaShop payments
How does the PrestaShop integration handle 3D Secure 2.0 requirements?
The module is designed to interact with the issuer's Access Control Server to perform risk-based authentication. If the transaction requires a challenge, the customer is prompted for additional verification such as biometrics or a passcode.
The integration handles the technical redirect and data exchange, ensuring SCA compliance under PSD2 while attempting to request exemptions where eligible, such as for low-value transactions or transaction risk analysis, to minimise friction.
Can I use multiple acquirers with a single PrestaShop payment module?
While standard modules often link to one provider, advanced payment orchestration integrations allow for smart routing across several acquirers.
This helps manage risk by distributing volume and provides a fallback mechanism if one acquirer declines a transaction due to their internal risk parameters or MCC restrictions. This setup requires the gateway to support multi-MID configurations, which are then governed by the module's logic.
What is the difference between immediate capture and authorised-only transactions?
An immediate capture clears the transaction as soon as the authorisation is granted, initiating the settlement process. An 'authorised-only' transaction places a hold on the customer's funds for a specific period without transferring them.
This is useful for merchants who need to verify stock before finalizing a sale. The PrestaShop module allows merchants to manually trigger the capture after the initial authorisation has been confirmed.
How does the module support recurring payments and subscriptions in PrestaShop?
The integration uses secure tokenisation to replace sensitive card data with a unique identifier. This token is stored in a PCI-compliant vault, allowing the merchant to initiate future transactions without the customer being present (MITs).
The module manages the specific flags required by schemes to identify these as subsequent payments, which is essential for maintaining high authorisation rates and avoiding soft declines from issuers.
Is it possible to manage chargebacks and disputes within the PrestaShop admin?
Many professional-grade modules provide a data sync that displays retrieval requests and chargeback notifications within the order detail view.
While the actual representment process might still require documentation to be uploaded via the gateway portal, having the status reflected in PrestaShop helps merchants stop fulfilment on disputed orders and adjust their reserve calculations accordingly in real time.
Will this integration store sensitive cardholder data on my PrestaShop server?
No, a secure integration utilises either hosted fields or a redirect to the gateway's environment. This ensures that sensitive Primary Account Numbers (PANs) never touch the merchant's server, which significantly simplifies PCI-DSS compliance requirements.
Instead, the server only handles secure tokens and transaction references, reducing the merchant's risk surface while still allowing for a customised checkout experience.
Ready for velocity?
Tell us about your business. We'll match you with the right acquiring partners and the right route, typically inside a week.