Jugaad Payment Gateway

Jugaad Pvt Ltd (https://gateway.finivex.online/home) operates Finivex, a payment platform built to help Zimbabwean businesses accept mobile-money, card, bank-transfer, and ZimSwitch payments through one service. Finivex supports popular payment methods including EcoCash, OneMoney, InnBucks, Omari, ZIPIT,   Visa, Mastercard, and ZimSwitch.     

The Jugaad Payment Gateway extension for Adobe Commerce and Magento Open Source connects your store to the Finivex hosted checkout. When a customer selects Jugaad Payment Gateway, the extension creates the Magento order and securely redirects the customer to the hosted payment page. The customer selects an   available payment method and completes payment outside the merchant’s Magento storefront. Finivex then returns the customer to the store and sends a signed  webhook to update the Magento order. The extension supports USD and ZWG transactions and gives merchants control over payment-method availability, checkout expiry, display title, and sort order.

Features                                                      

• Accept payments through EcoCash, OneMoney, InnBucks, Omari, ZIPIT, ZimSwitch, ZimSwitch POS, Visa, and Mastercard, subject to the methods enabled for your Finivex merchant account.     
• Process orders in USD and ZWG. 
• Redirect customers to a Finivex-hosted checkout page where they can complete payment securely. 
• Allow customers to choose from the payment methods available to the merchant, or configure the extension to use a specific payment method. 
• Automatically place new orders into the Pending Payment state while the customer completes checkout.
•  Receive real-time payment updates through signed webhook notifications.
•  Automatically move successfully paid orders to Processing and create an offline Magento invoice.  
• Automatically cancel orders when payments fail, are cancelled, or expire.
•  Update refunded orders and support initiating eligible payment refunds from Magento.  
• Validate the transaction identifier, order amount, currency, payment method, and permitted status transition before applying webhook updates.
•  Detect and safely ignore duplicate webhook events. 
• Record transaction references, payment method, amount, currency, payment status, and timestamps for payment auditing and troubleshooting.  
• Configure hosted-checkout expiry between 5 and 120 minutes.
•  Configure settings at the default, website, or store-view scope where supported.
•  Store API keys, API secrets, and webhook secrets using Magento’s encrypted configuration storage.  
• Use test credentials and a test gateway URL before switching the integration to live credentials. 
• Customize the payment-method title and its position in the Magento checkout payment list. 

Customer Checkout Experience

During checkout, the customer selects Jugaad Payment Gateway from the available payment methods. Magento creates the order with a Pending Payment status, and the extension creates a unique hosted-checkout session with Finivex. The customer is redirected to the Finivex checkout page to choose an available payment method and authorize the payment. After the payment attempt, the customer is returned to the Magento store. The extension uses the signed server-to-server webhook—not the customer’s browser redirect—as the authoritative  source for the final payment result.

For a completed payment, the order is moved to Processing and an invoice is created automatically. Failed, cancelled, or expired payments result in the  order being cancelled. Refunded transactions are recorded and the corresponding order can be moved to Closed. 

 Security, PCI Compliance, and Data Handling               

Finivex provides PCI-compliant handling for card payments through its hosted checkout. Customers are redirected to the Finivex-hosted payment environment; the extension does not display card-entry fields in the Magento checkout through an iframe or popup.                                                        

Card numbers, card security codes, PINs, mobile-money authentication credentials, and other sensitive payment credentials are not entered into or stored by this extension on the Magento server. The extension does not perform or store card tokenization.                                                            

To create a hosted-checkout session, the extension transmits the transaction identifier, order amount, currency, order description, configured payment method, checkout expiry, callback URLs, and the customer’s billing telephone number when available. The telephone number may be used to simplify mobile-money checkout. 

Magento stores only operational transaction information required to reconcile and manage the order. This includes the Magento order identifiers, Finivex transaction and checkout references, payment method, amount, currency, payment status, webhook-event fingerprint, and timestamps. API credentials and the webhook signing secret are stored through Magento’s encrypted configuration backend.

Incoming webhooks are authenticated using an HMAC-SHA256 signature and timestamp. The extension rejects missing, expired, or invalid signatures and checks the transaction identity, amount, currency, order payment method, and payment-state transition before modifying an order. Duplicate events are detected to prevent repeated processing.

Using a hosted payment page reduces the cardholder-data exposure of the Magento store, but merchants remain responsible for securing their Adobe Commerce or Magento Open Source installation, using HTTPS, restricting administrator access, protecting API credentials, applying security updates, and meeting any PCI DSS requirements that apply to their business and environment.

Account and Pricing

A separate Finivex merchant account (https://gateway.finivex.online/register) is required to use this extension. The account is not created during extension installation. Registration is available through the Finivex merchant portal and is subject to merchant approval. Finivex does not charge setup or monthly service fees, but transaction fees apply. Current published rates are 1.5% for local payment methods and 2.75% for Visa and Mastercard transactions. Review the latest information on the Finivex pricing page (https://gateway.finivex.online/home#pricing), as fees and merchant terms may change.

After approval, merchants generate their API key and API secret from the merchant portal and configure a webhook secret for payment notifications. The payment methods shown to customers depend on the methods activated for the merchant's Finivex account.

Supported Environments

The extension supports Adobe Commerce and Magento Open Source 2.4-based installations using Magento Framework 103 and PHP 7.4 or later, subject to the PHP requirements of the installed Magento release. The store's checkout currency must be USD or ZWG.

Latest Updates — Version 1.0.2

• Improved compatibility with Adobe Commerce and Magento coding and technical-review requirements.
•  Updated gateway communication to use Magento's framework-native HTTP client.
•  Improved dependency injection and payment-method initialization.
•  Strengthened configuration and payment-method validation.
• Improved package structure, error handling, and code documentation.
•  Retained signed webhook validation, duplicate-event protection, safe payment-status transitions, automated invoicing, and transaction auditing.

Documentation and Support

Read the Finivex integration documentation (https://gateway.finivex.online/home#docs) for information about hosted checkout, webhooks, payment statuses, and API behavior.

For merchant onboarding, credentials, payment-method activation, webhook configuration, or production support, contact support@finivex.online (mailto:support@finivex.online).