Skip to content

Logo

PayWings

Supports in this guide: Payments

Provider website: paywings.com


What you need to do for start processing transactions (brief summary)

  1. Get your credentials (from PayWings)
  2. Connect in Dashboard
  3. Send an API request

Prerequisites: get from PayWings

Contact your PayWings account manager to get your account verified and receive the following credentials.

  • Login -> Corefy field login.
  • Password -> Corefy field password.
  • SSL certificate -> Corefy field ssl_certificate -> optional, a file; upload it together with the SSL Password to authenticate requests with a client certificate.
  • SSL Password -> Corefy field ssl_password -> optional, required only if an SSL certificate is uploaded.
  • API URL -> Corefy field api_url -> optional, overrides the default endpoint; only needed if PayWings issues you a dedicated URL.

KZT only.


Payments processing (connect H2H Merchant account, create payment-invoice)

Connect H2H Merchant account in Corefy Dashboard

Step 1 - Open connection form

Open PayWings in the provider directory and press Connect at PayWings Provider Overview page in the New connection section.

Step 2 - Fill in fields and select settings

  • Login
  • Password
  • SSL certificate (optional)
  • SSL Password (optional)
  • API URL (optional)
  • Save token -> (saves PayWings's own order id for this transaction server-side; see Additional info)
  • Test Mode -> (enable if you are using sandbox credentials)

Choose Currency and Features. You can set these parameters according to available currencies and features for your PayWings account, but it is necessary to check details of the connection with your Corefy account manager.

Success

You have connected PayWings H2H Merchant account!


First request to Corefy API (MIN)

What it does: creates a payment-invoice; card data itself is collected and submitted separately by Corefy's checkout/SDK layer, not as part of this request. PayWings always requires the CVV - non-CVV payments are not supported.

Payment - MIN

POST /api/payment-invoices

{
  "data": {
    "type": "payment-invoice",
    "attributes": {
      "reference_id": "a7a12a3e-32bb-4683-997e-e063514c882e",
      "service": "payment_card_kzt_hpp",
      "currency": "KZT",
      "amount": 1001
    }
  }
}

Payment - MAX

POST /api/payment-invoices

{
  "data": {
    "type": "payment-invoice",
    "attributes": {
      "reference_id": "08f5e97c-1170-4bda-9625-3bde3c6dcd20",
      "service": "payment_card_kzt_hpp",
      "currency": "KZT",
      "amount": 1001,
      "customer": {
        "reference_id": "cus_123",
        "name": "John Smith",
        "email": "johnsmith@gmail.com",
        "address": {
          "country": "KZ"
        }
      }
    }
  }
}

Important

Of all the customer/billing fields, only customer.email and customer.address.country actually reach PayWings - customer.phone, and the rest of customer.address (city/region/zip/full address), are accepted by Corefy but are not forwarded to PayWings for this connector. customer.name is not sent either, unless the use_customer_name_as_card_holder option (see Options) is enabled, in which case it replaces the cardholder name taken from the card itself.


Extended request (MAX)

Why add extra fields (typical reasons): - Provide the customer's email/country for compliance or PayWings-side reporting - Force the cardholder name to follow the customer's own name - Include optional fields required by your specific flow


Options

Options are configured on the Corefy side and affect how Corefy builds provider requests or processes responses.

Currently available options (5)

  • always_force3d - forces 3D Secure on every transaction
  • disable_secure3d20_return_url - omits the 3DS2 return URL from the request
  • use_customer_name_as_card_holder - sends the customer's name as the cardholder name instead of the name entered on the card
  • browser3ds_method - collects the 3DS2 "method" step via the customer's browser (iframe) instead of server-side
  • pending_on_validation_failure - changes how a validation failure during 3DS completion is reported
always_force3d

What it does: forces 3D Secure authentication on every transaction, regardless of how it would otherwise be routed.

When to use: if you want every PayWings payment to go through 3DS.

Default: "false"

Allowed values: true, false

disable_secure3d20_return_url

What it does: omits the 3DS2 return URL field from the request sent to PayWings.

When to use: only if instructed by your PayWings account manager - omitting this field can affect how the 3DS2 challenge completes.

Default: "false"

Allowed values: true, false

use_customer_name_as_card_holder

What it does: replaces the cardholder name (normally taken from the card itself) with customer.name from the API request.

When to use: enable it if you want the name on file for the customer, rather than whatever was typed on the card form, to reach PayWings.

Default: "false"

Allowed values: true, false

browser3ds_method

What it does: when a 3DS2 "method" step is required, collects it through the customer's browser (an iframe) instead of Corefy performing it server-side.

When to use: troubleshooting 3DS2 method-step failures, or if instructed by your PayWings account manager.

Default: "false"

Allowed values: true, false

pending_on_validation_failure

What it does: changes how Corefy reports a transaction that fails validation while completing a 3DS challenge.

When to use: if you'd rather see such transactions reported as pending than as an immediate failure.

Default: "false"

Allowed values: true, false


Constants

Constants are static values that Corefy can send to PayWings instead of dynamic data from your API request, when those fields are missing in the request. These specific constants are browser/device metadata used for the 3DS2 "method" step - PayWings receives reasonable defaults even if you never set them.

Currently available constants (constant -> default)

  • OS -> Windows
  • OS_VERSION -> x86_64
  • PLUGINS -> PDF Viewer, Chrome PDF Viewer, Chromium PDF Viewer, Microsoft Edge PDF Viewer
  • IS_MOBILE -> false

Refunds

PayWings supports refunds.

  • Partial refunds are allowed.
  • Multiple refunds against the same transaction are not allowed - only one (partial or full) refund can be made per transaction.
  • The original transaction id is required to refund (handled automatically by Corefy).
  • No card data needs to be resubmitted to process a refund.

Additional info

  1. No automatic callback processing - PayWings transactions do not get an automatic status update from a callback for this connector; Corefy relies on an active reconciliation request (polling PayWings for the current order status) to confirm the final result. If a transaction looks stuck as pending, trigger a reconciliation rather than waiting for a callback.
  2. "Save token" does not enable recurring - the connection form has a toggle that keeps PayWings's own order id attached to a successful transaction, but this connector does not support charging that saved reference for a repeat/recurring payment through Corefy.
  3. 3D Secure - both 3DS1 and 3DS2 challenge flows are supported, as well as frictionless (non-challenge) authorization, depending on how the transaction is authorized; the CVV is always required regardless of the 3DS path.
  4. Mutual TLS is optional - if both the SSL certificate and SSL Password are provided, Corefy authenticates to PayWings with that client certificate in addition to the Login/Password credentials; without them, requests use Login/Password only.
  5. KZT only - this connector currently supports Kazakhstani tenge (KZT) exclusively.

FAQ / Troubleshooting

  • Invalid credentials / auth error -> verify login and password, and that Test Mode matches the credential environment
  • Currency or service is not supported -> PayWings only supports KZT; confirm this is enabled for your account in Corefy
  • Transaction stuck in pending -> trigger an active reconciliation request; this connector does not update status via callback
  • Client certificate errors -> make sure both the SSL certificate and SSL Password are uploaded together - providing only one of them has no effect
  • Expecting a recurring/repeat charge to work -> the "Save token" toggle does not enable recurring payments for this connector
  • Refund fails -> check that no refund has already been made for this transaction - only one refund (partial or full) is allowed per transaction

Question

Still looking for help connecting your PayWings account? Please contact our support team!