Magento 2 – Mastercard Gateway
Overview and Feature Support
Mastercard Inc. is the world’s second-largest payment processing corporation 
, providing a variety of payment solutions and services. We connect people, businesses, and organizations across over 210 countries and territories, creating opportunities for more people in more places, now and for the future. This module lets you add multiple payment options to your checkout, enabling secure credit, debit and account payments on your Magento-powered website.
Payments made through this module are processed using the trusted Mastercard Gateway. It securely handles card/account details, following strict legal and regulatory requirements, ensuring a safe experience for both businesses and customers.
We carefully monitor every transaction to catch and stop fraud, making sure your payments are safe and secure. Your sensitive payment details, like card/account information, are handled and stored on servers with the highest level of security certification, that is PCI (Payment Card Industry) Level 1.
With this gateway, you don’t have to handle or store customer card/account details yourself. This makes meeting PCI compliance much easier for your business. You can focus on running your store while the gateway securely processes payments for you.
Mastercard Payment Module Features
The Mastercard Payment Module is packed with tools to make payment processing easier and safer for your business. Here’s a quick look at its main features:
1. Payment Methods – Defines the types of payment options supported, which are:
- Card Payments
Easily and securely accept both credit and debit card payments. This feature works with major card brands, making it simple and reliable for your customers to pay. - Google Pay (Supported in Hosted Checkout Only)
With Google Pay, customers can quickly and easily pay on the hosted checkout page. To enable this option, ensure your Merchant Identification Number (MID) is configured for Google Pay. This makes payments smooth and hassle- free, allowing customers to complete transactions with just a few taps. - PayPal (Supported in Hosted Checkout Only)
With PayPal, customers can make payments quickly and effortlessly through the hosted checkout page. To use this option, ensure that your MID is set up for PayPal transactions. Once enabled, this feature provides a seamless and hassle-free payment experience, allowing customers to complete their purchases with just a few simple taps. - Automated Clearing House (ACH)
ACH payments let customers pay directly from their bank accounts through electronic transfers, making bank-to-bank payments easy and fast.
2. Checkout and Payment Integration – These features focus on methods of collecting payment details from customers:
- Hosted Checkout
This feature lets your customers enter their payment details on a readymade secure checkout page provided directly by Mastercard. It keeps sensitive information safe while giving your customers a smooth and hassle-free payment experience. - Hosted Payment Session
This feature lets you customize the layout and design of your payment page to match your brand, while still meeting strict PCI security standards. It makes managing security easier without compromising the user experience.
3. Fraud Prevention and Security – These features enhance security and protect against fraud:
- Address Verification Service (AVS)
AVS helps prevent fraud by checking the billing address provided during a payment to make sure it matches the one on file with the cardholder’s bank. This helps confirm that the person making the payment is the actual cardholder. To use AVS, it must be activated on your MID. - EMV 3-D Secure v1
EMV 3-D Secure (3DS1) adds an extra step to verify the cardholder during online transactions. This helps prevent unauthorized payments by asking the cardholder to confirm their identity. Before using this feature, make sure it’s enabled on your MID. - EMV 3-D Secure v2
EMV 3DS2 in the Mastercard Gateway, is the latest version of the security protocol, designed to enhance security in online purchases while providing frictionless checkouts to payers who are considered low risk by the Access Control Server (ACS). The ACS determines the risk using information provided by the merchant, browser fingerprinting, and previous interactions with the payer. Please note that this needs to be activated on your MID before you can use it. - Tokenization
Tokenization improves security by replacing sensitive card or account details (like your 16-digit Card number or Bank Account Number or Routing Number) with a unique, encrypted token which is created by Mastercard Gateway and sent to the merchant. This token can be used for future transactions, keeping your card information safe and private. To use Tokenization, it must be activated on your MID.
4. Transaction Management – These features support the processing and management of transactions:
- Capture Payments
This feature lets you manually process payments for authorized orders directly from your system. It gives you more control over how payments are handled. - Void Transaction
The void transaction feature lets you cancel an order before it’s invoiced or completed. This option is usually available for ‘Authorize Only’ transactions, where the funds are reserved but not yet charged or billed. - Full Refunds
You can refund the entire amount of the transaction back to the customer’s account. This is helpful when a complete order needs to be canceled or returned. - Partial Refunds
This feature lets you refund only part of an order, giving the customer the specific amount they are entitled to.
5. Headless Capabilities – This feature provides headless functionality:
- REST & GraphQL API
The Mastercard Magento Plugin connects with Mastercard’s Payment Service APIs to help you process payments smoothly. It also supports Headless Magento integration, which separates the front-end and back-end systems. This allows you to easily customize the user experience, whether you’re using React, Angular, or another front-end technology.
The Headless Magento architecture, paired with GraphQL, creates a flexible and responsive user interface. This makes it easier to add new features and payment options as they come up, ensuring that your payment solution stays up-to-date and can grow with your needs.
Starting from version 2.4.5, the plugin will collect analytics data, including the plugin download count from GitHub and the active installation count. The Active count, Store Name, Store URL, and the Country configured in the Magento 2 Admin page will be captured once the Test Mode is set as No and the API Username and API Password are saved in the configuration page.