Cashfree Payment Gateway.

Cashfree Payments is one of India's leading payments and API banking companies, licensed by the Reserve Bank of India as a Payment Aggregator. It enables businesses to collect and disburse payments across more than 120 payment methods - including UPI, credit and debit cards, net banking, popular wallets, EMI, and Buy Now Pay Later - and to send instant payouts to bank accounts and UPI IDs. Cashfree Payments processes payments for hundreds of thousands of businesses and maintains PCI DSS Level 1 compliance, the highest level of certification in the payments industry.

This extension (CHK_Cashfree) integrates the Cashfree Payments stack directly into your Adobe Commerce (Magento 2) store: the Cashfree Payment Gateway for accepting payments at checkout, and the Cashfree Payouts API for disbursing funds from the admin panel. At checkout, a shopper selects Cashfree, places the order, and is taken to Cashfree's secure hosted checkout to complete payment using UPI, cards, net banking, wallets, EMI, or Pay Later. On success, the shopper is returned to your store, the payment is verified server-side, and the order and invoice are created automatically. Asynchronous confirmations are handled through signed webhooks, and refunds are issued from Magento credit memos. It is well suited to any Indian Adobe Commerce merchant who wants a single, modern, secure integration for both collecting payments and making payouts - for example, an online retailer collecting UPI/card payments and a marketplace operator paying out to vendors.

Account & Pricing

A separate Cashfree Payments merchant account is required to use this extension. The account is not created during extension installation - you must sign up and complete KYC / onboarding with Cashfree separately before you can accept live payments. You can create an account at https://www.cashfree.com/.

The Cashfree service charges per-transaction fees for payment processing (these are service fees charged by Cashfree, separate from the price of this extension). Fee rates vary by payment method and are subject to change; there is no setup or activation fee to open an account. For current, authoritative rates please see the Cashfree pricing page at https://www.cashfree.com/payment-gateway-charges/. For account setup or commercial questions, contact Cashfree Payments support through their website at https://www.cashfree.com/.

Features

Payment Gateway:

• Accept UPI, credit and debit cards, net banking, wallets, EMI, and Buy Now Pay Later through Cashfree's hosted checkout
• Secure hosted checkout - no card data is entered on or stored by your Magento server
• Server-side payment verification before order confirmation
• Signed webhook handling (HMAC-SHA256) for reliable asynchronous payment confirmation
• Full and partial refunds issued directly from Magento credit memos
• Live payment status lookup from the Cashfree API on the admin order view
• Separate Sandbox and Production environments, configurable per store view
• Configurable payment action and order status mapping

Payouts:

• Disburse funds to beneficiary bank accounts (IMPS / NEFT) or to UPI IDs
• Create and manage payout transfers from the Magento admin panel
• Independent payout credentials, kept separate from payment-gateway credentials
• Transfer status tracking

Platform & Quality:

• Compatible with Adobe Commerce (EE), Adobe Commerce Cloud (ECE), and Magento Open Source (CE) 2.4.x
• PHP 8.1 to 8.5 compatible
• Modern Payment Adapter facade (does not use the deprecated AbstractMethod)
• Declarative database schema (db_schema.xml)
• All credentials and secrets encrypted using Magento's EncryptorInterface
• Content Security Policy (CSP) compliant
• Coding-standard clean (phpcs Magento2, 0 errors)

Security

This extension uses a redirect / hosted-checkout integration method. When a customer pays, they are redirected to Cashfree's secure, PCI DSS Level 1 hosted checkout page (loaded through the official Cashfree JavaScript SDK) to enter their payment details.

• Integration method: Redirect to Cashfree's hosted checkout (not a direct/seamless API card capture on the merchant site).
• Where payment data is entered: All sensitive payment and cardholder data is entered by the customer on Cashfree's hosted checkout page, not on the merchant's Adobe Commerce site.
• Card data entered into the Magento server: No. Cardholder data is never entered into, transmitted through, or processed by the Magento server.
• Card data stored on the Magento server: No. No cardholder data is stored on the Magento server. The extension stores only non-sensitive references such as the Cashfree order ID and payment ID.
• PCI compliance / SAQ level: Because all cardholder-data functions are fully outsourced to Cashfree (a PCI DSS Level 1 certified provider) via redirect, a merchant using this extension typically qualifies for the simplest self-assessment, SAQ A. Merchants remain responsible for confirming their own PCI compliance level as applicable to their business.
• Additional safeguards: Webhook authenticity is verified with HMAC-SHA256 signatures, payments are verified server-side before orders are confirmed, and all API credentials are stored encrypted using Magento's EncryptorInterface.