HSBC Payments for WooCommerce adds two payment methods to your store, each configured under WooCommerce > Settings > Payments.
PayMe from HSBC (uses the PayMe for Business API)
- HKD only, as required by PayMe.
- A clean pay page with a PayCode (QR), an “Open PayMe app” button on phones, a live countdown and status.
- Orders are confirmed by HSBC’s signed webhook, with a rate-limited status check as a safety net.
- Full and partial refunds from the order screen, and a manual “re-check status” button.
- Separate sandbox and live credentials, plus a “Test connection” button.
HSBC card payments (hosted)
- Customers enter card details on the gateway’s hosted page, so card data never reaches your server.
- Orders are confirmed by reading the order back from the gateway, never by trusting the browser redirect.
- Charge immediately, or authorize now and capture when the order is completed (cancelling voids the hold).
- Optional webhook safety net and refunds from the order screen.
- Needs the gateway host, merchant ID and API password issued to you by HSBC.
Built for modern WooCommerce
- HSBC payment panel on every order showing references, with capture and re-check actions.
- Translation ready, with Traditional Chinese (Hong Kong) included for customer-facing text.
- Works with the block-based Cart and Checkout and the classic shortcode checkout.
- Declares compatibility with High-Performance Order Storage (HPOS).
- Secrets are masked in logs; webhook signatures and digests are verified before anything is changed.
- No third-party logos are bundled. Add your own licensed icon URL in settings.
Disclaimer
This is an independent integration. It is not published, endorsed or supported by HSBC. HSBC and PayMe are trademarks of their respective owners. You need your own HSBC merchant arrangements and API credentials.
External services
This plugin sends order data to HSBC services when a customer pays or when you refund.
PayMe for Business API (HSBC)
* Used to create payment requests, check their status, cancel them and issue refunds.
* Data sent: order amount, currency, order ID, a short order description and your site’s notification and return URLs; your API credentials are used to sign requests.
* Endpoints: https://api.payme.hsbc.com.hk (live) and https://sandbox.api.payme.hsbc.com.hk (test).
* Terms: https://payme.hsbc.com.hk/business-terms-and-conditions and https://payme.hsbc.com.hk/pws-privacy-security
Hosted card gateway (host supplied by HSBC for your merchant account)
* Used to create a hosted checkout session, read the order result and issue refunds.
* Data sent: order amount, currency, a gateway order ID, a short description, your store name and URL, and your merchant credentials. The customer’s card details are entered on the gateway’s page, not on your site.
* The host is the one you enter in settings. Review the terms HSBC gave you for that service.