PaySimple for WooCommerce lets a service business that bills through PaySimple take card payments in its WooCommerce store on the same merchant account, so online orders land beside its invoices and recurring billing.

Card details never reach your server

The card form is PaySimpleJS. PaySimple draws it in its own frame on your payment step, so the card number, expiry, CVV and postcode go straight to PaySimple. Your server only receives a payment token that works once, which keeps your PCI scope small.

Charged from your server

The plugin collects the payment for the order total with your API credentials and sends the order number and a description along. The order is marked paid only when PaySimple answers that the payment was authorised for the order's own amount. A declined card shows PaySimple's reason and the form reloads for another try. If the card network has not answered yet, the order waits on hold instead of being shipped or charged twice.

Void or refund, chosen for you

Press Refund on the order for the full amount. PaySimple voids a payment before its daily cut-off and refunds it once it has settled; the plugin reads the payment and uses the right one.

Where this leaves your PCI questionnaire

Because the payment form is the provider's own, SAQ A stays available to you — but PCI DSS v4.0.1 added an eligibility condition: you must be able to confirm your page is not susceptible to script attacks. PCI SSC FAQ 1588 gives two ways to do that. Ask your provider for written confirmation that its embedded payment solution protects the payment page against script attacks, or apply protections of the kind described in requirements 6.4.3 and 11.6.1 yourself. The first is one email and most shops should send it.

Good to know

You need your own PaySimple account with API 4.0 credentials (PaySimple support issues them, and sandbox ones for testing), a store in US dollars and HTTPS. PaySimple's API returns a payment as a whole, so a part refund cannot be sent from the order screen. ACH, saved cards, recurring schedules and 3D Secure are not included. AllPlugin is not affiliated with PaySimple.