WooCommerce Accept.Blue Payment Gateway

Accept accept.blue payments in WooCommerce with enterprise-grade security, Level II/III support, and full Secure Acceptance integration. Built for businesses that need compliance, reliability, and advanced transaction data — not just basic payments.

✔ Trusted by merchants ✔ Actively maintained

Demo

• Gateway Demo: https://acceptblue.ryanplugins.net/classic-demo/ (Classic Version)
• ACH Demo: https://acceptblue.ryanplugins.net/ach-demo/

Features

1. Secure, fast, and PCI-compliant WooCommerce checkout experience
2. 3D Secure (3DS) and Strong Customer Authentication (SCA) support for advanced fraud prevention
3. Enhanced payment security and fraud detection for safer transactions
4. User-friendly and fully customizable extension settings
5. Seamless sale transaction processing
6. Authorization (Auth Only) and capture payment support
7. Full and partial refund processing support
8. Multi-currency payment support for global eCommerce transactions
9. Fully compatible with WooCommerce Subscriptions and recurring payments
10. Compatible with WooCommerce Deposits and partial payment options
11. ACH/eCheck payment integration for low-cost bank transfers
12. ACH/eCheck recurring and subscription payment support
13. Optimized for High-Performance Order Storage (HPOS) for better performance and scalability
14. Advanced Level III (Level 3) data processing for enhanced reporting and lower interchange rates
15. WooCommerce Checkout Block compatibility (Card and ACH payments)
16. Brute-force protection on payment attempts
17. External ERP / NetSuite-friendly payment metadata

Online Docs

• How to Install WooCommerce Accept.Blue Payment Gateway
• How to get accept.blue Payment Gateway Merchant Source Key and PIN?

accept.blue API Docs

• Accept.Blue API Documentation and Credentials

Changelog

== Changelog ==

= 1.30.1 — 2026-09-21 =

Hotfix for a fatal introduced in 1.30.0. Update if you are on 1.30.0.

* Fix      - A card payment that was refused before it reached Accept.Blue
             — by a CDN or firewall — could fail with "Only variables can
             be passed by reference" instead of being retried. The retry
             added in 1.30.0 was the thing that broke, so the failure
             landed on requests that had already been refused once.

= 1.30.0 — 2026-09-21 =

* Breaking - v2 JSON API only. The API Version setting, the v1 base URL and
             every code path to /api/v1/gate are gone. Nothing customer-visible
             changes.
* Security - Vault references and cardholder details masked in the debug log.

* Fix      - Add payment method failed for every customer.
* Fix      - Capturing from the order screen reported failure on every
             successful capture, and did not set the double-capture lock.
* Fix      - ACH refunds could not complete in either direction.
* Fix      - Changing the card on a subscription did not stick.
* Fix      - Saving a card already on file added a duplicate every time.
* Fix      - Customers with more than ten saved methods could not use the rest.
             … 8 more

* Add      - Requests refused by a CDN or firewall (403/429) are retried.
* Dev      - Removed dead code; added PHPStan and four test suites.
* Update   - WooCommerce tested up to 11.1.0.

= 1.29.0 — 2026-08-25 = 

### Added

* Added **Capture Mode**: Automatic Capture, Authorization Only, and External ERP / NetSuite Capture.
* Added server-side 3D Secure enforcement.
* Added improved surcharge handling as a WooCommerce fee.

### Security

* Fixed a security issue with subscription renewals using another customer's vaulted payment method.
* Improved 3D Secure enforcement to prevent unauthenticated card charges.

### Fixed

* Fixed surcharge calculation, display, and 3DS amount mismatch issues.
* Fixed incorrect authorized amounts when surcharges are enabled.
* Fixed WooCommerce order totals when Accept.Blue applies surcharges server-side.
* Fixed saved cards not appearing in My Account.
* Fixed partially approved subscription renewals being marked as fully paid.
* Fixed subscription renewal capture issues.
* Fixed duplicate Accept.Blue customer records during refunds.
* Fixed saved ACH accounts with Subscriptions and Block Checkout.
* Fixed free-trial ACH payments incorrectly charging $0.01.
* Fixed 3DS logs exposing billing information.
* Fixed surcharge amount formatting in Block Checkout.

### Improved

* ACH is now hidden until the plugin license is activated.
* Improved surcharge handling when switching payment methods.
* Improved payment logging and sensitive data masking.
* Added extensive unit and integration test coverage.

= 1.28.13 =

FIXED: Saved card payments on Block Checkout failing when WooCommerce Subscriptions is active.
FIXED: Saved card transactions sending invalid or empty card details.
Improved compatibility between saved cards, Block Checkout, and subscriptions.

= 1.28.12  =

FIXED: Block Checkout showing "Invalid or missing payment token fields" after a successful payment.
FIXED: Card expiry and card type not being saved correctly with "Save to account." 
Improved payment reliability when saving cards.

= 1.28.11  =

FIXED: Saved ACH payments failing with "Customer Name not submitted." 
Improved customer information synchronization for saved bank accounts.
Improved reliability of automatic ACH subscription renewals.

= 1.28.10  =

SECURITY: Completed a full security audit with no new vulnerabilities found.
FIXED: PHP warnings during 3DS, Block Checkout, and saved-card payments.
FIXED: Incorrect card expiry format for Block Checkout tokenized cards.

= 1.28.9  =

FIXED: Accepted Card Logos not displaying on Block Checkout.
Improved card logo display to match Classic Checkout.

= 1.28.8 =
* Security - Fixed a bug that let a logged-in customer change the payment method on another customer's subscription.
* Security - Improved legacy transaction hash verification to prevent comparison bypass.
* Security - CVV is now fully removed from debug logs instead of partially shown.

= 1.28.7 =
* Fix - Card subscription renewals now save the recovered payment token permanently instead of re-searching for it every renewal.
* Fix - Corrected an IP detection typo that caused rate limiting to always fall back to the server IP.
* Fix - Removed deprecated debug logging that could trigger PHP notices.

= 1.28.6 =
* Fix - ACH: customer phone numbers outside the US were being erased from the saved customer profile instead of preserved.

= 1.28.5 =
* Fix - ACH: subscription renewals no longer fail due to phone number formatting rejected by the payment processor.
* Feature - Customer billing details in My Account now sync to the Accept.Blue customer record on save, not just at checkout.

= 1.28.4 =
* Fix - ACH: resolved "Customer Name not submitted" renewal failures caused by ACH and Card creating separate, disconnected customer records.

= 1.28.3 =
* Security - Full codebase security audit completed (all files, all payment paths).
* Security - Fixed an IDOR vulnerability allowing classic checkout to potentially charge another customer's saved card.
* Security - Full API response logging no longer includes unmasked sensitive fields.

= 1.28.2 =
* Fix - Switching payment gateways on a subscription now reliably saves the new method (previously only worked via the My Account page).
* Fix - ACH: fixed a bug where new (non-saved) bank account payments didn't save properly to the subscription.
* Fix - Fixed subscription renewal orders not being found correctly in two code paths, causing missing payment metadata.

= 1.28.1 - 2026-07-11 =
* New: Added card-testing protection for Block Checkout card tokenization requests with IP-based rate limiting.
* Security: Improved sensitive data masking in debug logs across Card and ACH gateways.
* Security: Hardened Block Checkout surcharge notice against potential XSS vulnerabilities.
* Tweak: Consolidated log masking into a single recursive implementation.
* Tweak: Completed a full security audit and code hardening across the plugin.

= 1.28.0 - 2026-07-10 =
* New: Added "Name on Card" field support for Block Checkout (3DS & non-3DS) and Classic Checkout 3DS.
* New: Added NetSuite order metadata (card brand, card type, last 4 digits, auth code, transaction type) with WooCommerce REST API support.
* New: Added automatic Accept.Blue customer vaulting and transaction linking.
* New: Added customer synchronization between WooCommerce and Accept.Blue.
* New: Expanded card-testing protection to Add Payment Method and WooCommerce Subscriptions checkout flows.
* Fix: Improved PHP 8.4 compatibility and removed undefined array key warnings.
* Fix: Improved checkout validation and request handling for greater stability.

= 1.27.84 =
* New: Card testing protection — blocks repeated payment attempts from the same IP after too many declines.
* New: Auto-fail declined orders — automatically marks an order "Failed" after a few bad payment attempts instead of leaving it stuck pending.
* New: Adjustable 3DS timeout — customers now get more time to complete the 3D Secure challenge.
* Fix: Subscription renewals failing with errors like "Saved card was not found" or "Invalid reference number" — the wrong type of card token was being sent to Accept.Blue.
* Fix: "Change Payment Method" breaking in several situations: switching from another gateway, using a saved card, and using Block Checkout.
* Fix: ACH (bank transfer) subscriptions not supporting Change Payment Method at all.
* Fix: A checkout error ("createElement is not defined") that broke the Card and ACH payment forms on some sites.
* Fix: A fatal error and a false "could not save bank account" message on the change-payment page.

= 1.27.62 — 2026-05-10 =

* NEW: Block Checkout and Classic Checkout now work automatically together without requiring a separate “Checkout Block” setting.
* IMPROVEMENT: Simplified checkout flow handling for both Card and ACH gateways.
* IMPROVEMENT: Payment declined order status now changes from Failed to Pending.
* FIX: Resolved “Payment error: Card number is invalid” issue on WooCommerce Block Checkout.
* FIX: Improved block checkout validation for tokenized card and ACH payments.
* FIX: Saved payment methods now correctly display during Classic Checkout when 3D Secure is enabled.
* FIX: Hosted Tokenization iframe now properly hides when customers select a saved card.
* FIX: Removed unnecessary verify() API pre-check during card tokenization to prevent AVS mismatch issues.
* IMPROVEMENT: Faster card saving process with fewer API requests.
* IMPROVEMENT: Better compatibility between WooCommerce Blocks, 3DS, saved cards, and tokenization flows.

= 1.27.61 = - 23 April 2026
* NEW: Full 3D Secure (3DS) implementation across Classic checkout, Block checkout, Order Pay, Add Payment Method, and WooCommerce Subscriptions.
* NEW: Hosted Tokenization iframe replaces card form when 3DS is enabled.
* NEW: Paay SDK integration with EMV 3DS status handling (Y/A pass, N/U/R fail).
* NEW: Level 3 line item support for 3DS payments using v2 API format.
* NEW: “Save to Account” support with 3DS (card_ref tokenization from API response).
* NEW: Add Payment Method with 3DS ($0.01 validation + auto void + token save).
* NEW: Order Pay page support for 3DS with native form submission.
* NEW: Surcharge inline notice displayed on Classic and Block checkout.
* NEW: Surcharge API caching (transient + per-request cache).
* NEW: Always-on 3DS diagnostic logging (accept-blue-3ds log source).

* FIXED: Save to account not working with 3DS (card_ref path corrected to top-level API response).
* FIXED: 3DS verification logic using correct EMV status codes (Y/A/N/U/R).
* FIXED: 3DS failure incorrectly allowing order processing.
* FIXED: Save card flag not sent in API request, preventing token return.
* FIXED: Add Payment Method page broken under 3DS (added tokenization flow using transient token).
* FIXED: Classic checkout missing “Save to account” checkbox in 3DS mode.
* FIXED: Block checkout HostedTokenization double-load JS error.
* FIXED: Order Pay page sending incorrect amount (0) to 3DS verification.
* FIXED: Free trial 3DS verification failing (enforced minimum 0.01 amount).
* FIXED: WooCommerce Subscriptions (addons) missing 3DS handling.
* FIXED: Surcharge fee not saved on 3DS orders.
* FIXED: Surcharge notice display issues (position, duplication, block rendering).
* FIXED: Block checkout JS (minified file) rebuilt to include latest changes.
* FIXED: Console logs removed from production scripts.

* IMPROVED: Surcharge notice accuracy using correct base amount.
* IMPROVED: Compatibility across WooCommerce Classic and Blocks checkout.
* IMPROVED: Tokenization flow reliability for subscriptions and saved cards.

* NOTE: This release includes major improvements to 3DS security, tokenization, and checkout compatibility across all WooCommerce flows.

= 1.27.50 — 2026-04-19 =
* Feature - 3D Secure (3DS) support for classic checkout. A dedicated Place Order button owns the full 3DS flow — tokenise, verify, challenge, and submit — without page navigation. Full-page overlay covers the checkout at every stage so customers know their order is being processed.
* Feature - 3D Secure (3DS) support for WooCommerce Block Checkout. 3DS verification runs inside the block payment form with the same tokenise → verify → submit flow, compatible with WooCommerce 8+ block-based checkout.
* Fix - Line item quantity field sent as UMline1quantity instead of the correct UMline1qty, causing Level 3 data rejection by the Accept.Blue API.
* Fix - 3DS overlay not appearing after challenge confirmation while checkout AJAX request was pending.
* Fix - Duplicate card input fields rendered on classic checkout after any updated_checkout AJAX event (address validation, coupon, shipping change).
* Fix - Removed leftover debug console.log statements from localize.js and acceptblue.js.
* Tweak - 3DS processing overlay now appears immediately when the challenge window closes and covers the full page until redirect.
* Tweak - Overlay z-index raised to maximum (2147483647) to ensure it sits above all theme elements and the 3DS challenge iframe.
* Tweak - Added sub-message below the overlay spinner to communicate status at each stage of the 3DS flow.
* Tweak - Updated plugin header: WC requires at least raised to 6.0, WC tested up to updated to 10.6.1.

= 1.27.33 — 2 April 2026 =

* Feature: Added Accept.Blue Payment meta box in the order sidebar, replacing inline action buttons.
* Feature: Meta box dynamically displays "Capture Payment" or "Adjust & Capture" based on order total changes.
* Feature: AJAX-powered capture actions with inline success/error feedback and no page reload.
* Feature: Capture Order Status now uses woocommerce_order_status_changed for full compatibility (Classic + HPOS).
* Feature: Enhanced debug logs with endpoint and HTTP method labels for all API requests.
* Feature: Improved free trial handling using $0.01 auth + void flow to generate reusable cardRef tokens.

* Fix: Resolved fatal error when logging non-scalar API response data.
* Fix: Corrected log formatting for ACH requests and responses.
* Fix: Updated capture success validation to use status='Approved' and status_code='A'.
* Fix: Corrected transaction ID lookup to prioritize _refnum across all processes.
* Fix: Capture not triggering reliably on admin status change (HPOS compatibility issue).
* Fix: Ensured order meta is saved before triggering capture checks.
* Fix: Updated void process to use V2 /transactions/void endpoint.
* Fix: Removed incorrect API URLs causing 404 errors (fixed /api/v2/ path).
* Fix: Enforced minimum transaction amount of $0.01 across all payment flows.
* Fix: Subscription renewal amounts and tax scaling for both Card and ACH.
* Fix: Improved handling of $0 trial conditions (< 0.01 logic).

* Tweak: Capture and Adjust & Capture buttons are now mutually exclusive.
* Tweak: Added tooltips showing capture and before/after amounts.
* Tweak: Added prominent total-changed warning banner on order screen.

* Removed: Recharge button and all related functionality.
* Removed: Inline Capture Charge and Adjust & Capture buttons.
* Removed: Auto Adjust & Capture setting from gateway settings.
* Removed: Automatic adjust-capture trigger on order update.

= 1.26.33

27 February 2026

Added: Added ACH / eCheck subscription/recurring payment support.
Added: Added ACH / eCheck payment method tokenization.
Fixed: Resolved issue with saved card token handling.
Tested: WooCommerce 10.5.1
Tested: WordPress 6.9.1
Tested: WooCommerce Subscriptions 8.4.0

= 1.25.32

16 February 2026

Updated: Dynamic capture now respects configured order status settings.
Improved: Level 3 line-item data sanitization (HTML tags are now safely stripped).
Fixed: Default order status handling.
Tested: WooCommerce 10.5.1
Tested: WordPress 6.9.1
Tested: WooCommerce Subscriptions 8.4.0

= 1.24.31

- 10 February 2026 -
- Updated: Order status flow settings.
- Updated: Transaction status added to admin order notes.
- Improved: Cleaned API class and removed debug code.
- Fixed: Prevented duplicate API capture requests from admin order actions.
- Fixed: Deprecated WooCommerce function notice.
- Fixed: Blank checkout error message issue.
- Tested: WooCommerce 10.4.3
- Tested: WordPress 6.9
- Tested: WooCommerce Subscriptions 8.3.1

= 1.23.30

- 24 January 2026 -
- FIXED: Subscription Customer token fallback if empty default to saved card token
- FIXED: Bug non subscription card token validator
- TESTED: up to WC 10.4.3
- TESTED: up to WP 6.9
- TESTED: up to WCS 8.3.1

= 1.23.29

- 31 December 2025 -
- FIXED: WP.element js object.

= 1.23.28

- 31 December 2025 -
- UPDATE: Support WooCommerce Block Checkout Card and ACH.

= 1.22.28=

- 06 November 2025
- FIXED: Enable Customer Change Payment Method when Subscription is failing.

= 1.22.27=

- 20 September 2025
- UPDATE: UI improvements for card labels

= 1.22.26=

- 04 September 2025
- UPDATE: Level3 Data implementation
- UPDATE: Enabled Security Code in Saved card token
- FIXED: Surcharge Bug

= 1.21.25=

- 03 June 2025
- UPDATE: removing surcharge item in the orders if not accept.blue payment method
- UPDATE: removing surcharge in checkout if not accept.blue payment method

= 1.21.24=

- 20 May 2025
- UPDATE: if payment method accept.blue selected in the checkout page surcharge will show

= 1.20.24=

- 22 April 2025
- FIXED: Surcharge BUG showing in other payment orders

= 1.20.23=

- 04 March 2025
- FIXED: Fixed Card and Subscriptions special character apostrophe
- FIXED: Fixed PHP Warning, Undefined array keys in addons<dot>php
- FIXED: Remove update status when charge is trigger

= 1.20.22=

- 20 February 2025
- FIXED: Fixed ACH special character apostrophe

= 1.20.21=

- 08 January 2025
- FIXED: Fixed PHP Warning, Undefined array keys

= 1.20.20=

- 03 November 2024
- FIXED: Fixed Test cards

= 1.20.19=

- 21 October 2024
- UPDATE: Surcharge auto fetch merchant value
- UPDATE: Detached Google Pay Integration of some Issue in the woocommerce feature, this will be separate plugin and included in the package Accept.Blue V2 Package.
- UPDATE: Surcharge Showing in the Checkout Page Settings.

= 1.19.19=

- 04 October 2024
- UPDATE: Surcharge local settings integration

= 1.18.19=

- 22 September 2024
- UPDATE: Google Pay WooCommerce Subscription products supported

= 1.17.19=

- 20 September 2024
- FIXED: Warning, Undefined variable $price_include_tax

= 1.17.18=

- 03 September 2024
- UPDATE: Google Pay Order Review Page

= 1.17.17=

- 30 Aug 2024
- UPDATE: Google Pay Payment Method Integration
- UPDATE: Google Pay Button Integration

= 1.17.16=

- 17 Aug 2024
- FIXED: HPOS wp function Bugs
- FIXED: Auto-capture Subscription and Non Subscription products

= 1.17.15=

- 26 November 2023
- Update: High-Performance Order Storage (HPOS) Supported

= 1.16.15=

- 08 November 2023
- Update: Capture Card Processor error response message

= 1.15.15=

- 31 October 2023
- FIXED: (\*) required name of card label

= 1.15.14=

- 20 October 2023
- FIXED: (Optional) name of card label

= 1.15.13 =

- 28 Sep 2023
- FIXED: Card name validation

= 1.15.12 =

- 02 Aug 2023
- UPDATE: Required Name on Card Settings.
- FIXED: PHP Error notices.

= 1.15.11 =

- 03 March 2023
- UPDATE: New payment module implemented, AcceptBlue ACH.

= 1.14.11 =

- 15 January 2023
- FIXED: bugs trigger capture in the admin orders, when the orders already completed and captured.

= 1.14.10 =

- 27 July 2022
- UPDATE: WC Order status cancelled - AB void implementation
- FIXED: fatal error installation

= 1.13.9 =
* 12 December 2021
* UPDATE: Customer change payment method subscription

= 1.12.9 =
* 25 October 2021
* FIXED: card validation
* UPDATE: implement add payment method

= 1.11.8 =
* 09 October 2021
* UPDATE: API gateway URLs

= 1.10.8 =
* 12 August 2021
* UPDATE: add recharge and adjust button in wc orders 

= 1.9.8 =
* 20 June 2021
* UPDATE: force save card token

= 1.8.8 =
* 31 May 2021
* UPDATE: refund api call to version 2 

= 1.7.8 =
* 29 May 2021
* UPDATE: add new plugin version in API request agent

= 1.6.8 =
* 11 May 2021
* UPDATE: add new AB params UMtax

= 1.5.8 =
* 30 April 2021
* FIXED: auto-capture error in dashboard

= 1.5.7 =
* 11 march 2021
* FIXED: auto-capture wc_status outside WooCommerce

= 1.5.6 =
* 24 february 2021
* FIXED: auto-capture on-change globally when the wc order status is completed

= 1.5.5 =
* 18 february 2021
* FIXED: auto-capture when payment complete

= 1.5.4 =
* 17 February 2021
* UPDATE: Manual Capture button in admin order
* UPDATE: Default Order Status
* UPDATE: UMip API request
* UPDATE: AutoSave Accept.Blue payment token when the order is a subscription
* TESTED: WC 5.0

= 1.4.4 =
* 30 december 2020
* UPDATE: remove tgmpa() conflicting in the other envato theme and codecanyon plugin
* UPDATE: timeout response message
* TESTED: WC 4.8

= 1.3.4 =
* 25 November 2020
* FIXED: auto-capture admin hook 

= 1.3.3 =
* 25 september 2020
* FIXED: refund bug

= 1.3.2 =
* 06 June 2020
* UPDATE: refund with fee

= 1.2.2 =
* 23 May 2020
* UPDATE: Auto-capture
* UPDATE: refund command to creditvoid

= 1.1.2 =
* 25 January 2020
* FIXED: Bugs CC save token 

= 1.1.1 =
* 28 November 2019
* FIXED: live gateway url

= 1.1 =
* 1 October 2019
* UPDATE: Multi-currency Implementation
* UPDATE: WooCommerce Subscription Implementation

= 1.0 =
* 19 September 2019
* Initial release version