Autify Digital Lloyds® Gateway for WooCommerce

Connect your WooCommerce store to Lloyds Merchant Services with this secure payment gateway plugin by Autify. Offer your customers a reliable and seamless way to pay using Visa, Mastercard, American Express, and digital wallets directly from your online store, with real-time processing and flexible configuration options to suit your business needs.

What is Lloyds?

Lloyds offer a secure card payment solution that enables businesses to accept a variety of payment methods, including credit and debit cards, Apple Pay, and Google Pay, through their WooCommerce store. This integration with the Autify plugin seamlessly enhances transaction efficiency and improves customer experience by offering a smooth, uninterrupted payment journey.

How the Plugin Works

The Autify plugin for WooCommerce connects with the Lloyds Gateway enabling your customers to pay securely using their preferred payment method at checkout. Choose between an embedded payment form (Payment.JS) directly on your checkout page or a redirect to the secure Lloyds hosted payment page. Once the transaction is authorised, the payment is confirmed in real time through webhook integration, and order statuses are updated automatically.

From your WooCommerce admin panel, you have complete control over the payment experience. Configure payment methods, manage tokenised cards, process refunds, and monitor all transactions through the built-in reporting dashboard. The plugin supports recurring payments for subscription-based products, MOTO transactions for phone/email orders, and express checkout with Apple Pay and Google Pay on product, cart, and checkout pages.

When to Use This Plugin

This plugin is ideal for any WooCommerce merchant who needs to accept card payments through Lloyds. Whether you run an online retail store, offer subscription services, or need to process phone orders, the Lloyds Gateway provides a secure, PCI-compliant payment solution that integrates directly into your WooCommerce checkout flow.

Features

• Embedded Payment (Payment.JS) — Seamless checkout with a secure payment form directly on your site using iframes. Card data is handled entirely by Lloyds — never touches your server.
• Hosted Payment Page (HPP) — Redirect customers to the secure Lloyds hosted payment page for PCI compliance with minimal integration effort.
• Apple Pay Support — Allow customers to pay quickly using Apple Pay on compatible devices and browsers for a fast, native payment experience.
• Google Pay Support — Accept payments via Google Pay for a frictionless checkout experience across Android and Chrome.
• Express Checkout — Display Apple Pay and Google Pay buttons on product, cart, and checkout pages, allowing customers to skip the standard checkout process.
• Card Tokenisation — Allow customers to securely save card details for faster future purchases. Card data is never stored on your server.
• Subscription Support — Set up recurring payments for subscription-based services with automatic renewal processing via card payments.
• MOTO Payments — Process Mail Order/Telephone Order payments securely from the WooCommerce admin panel.
• Refund Management — Process full or partial refunds directly from the WooCommerce order page with automatic gateway integration.
• 3D Secure 2 (3DS2) — Smart authentication with dynamic challenge requirements supporting Strong Customer Authentication (SCA) under PSD2 regulations.
• Transaction Reporting — Comprehensive reporting dashboard with advanced filtering, CSV export, and traffic light verification status indicators.
• Real-Time Processing — Instant payment confirmations and status updates via webhook integration.
• Sandbox/Test Mode — Test transactions without processing real payments using Lloyds sandbox credentials.
• Multi-Currency Support — Configure multiple currencies and selling locations based on your merchant account capabilities.
• WooCommerce Blocks — Support for both classic and block-based checkout.
• HPOS Compatible — Full support for WooCommerce High-Performance Order Storage.
• Dedicated Customer Support — Reliable installation and post-integration support from Autify Digital.

Security & Compliance

The Autify plugin working with Lloyds uses embedded payment forms and hosted payment pages to ensure the highest level of security for your business and your customers. All sensitive payment information, including credit and debit card details, is handled directly by Lloyds Bank’s PCI DSS Level 1 certified infrastructure — never on your WordPress server.

This approach means that no customer payment data is entered into, processed by, or stored on your server at any point during the transaction. Your server only receives non-sensitive transaction confirmation data via secure webhook notifications, such as the payment status and reference number. As a result, this integration supports PCI DSS SAQ A compliance, significantly reducing your compliance obligations and security risks.

All API communications are encrypted via HTTPS/TLS. The plugin supports 3D Secure 2 authentication for Strong Customer Authentication (SCA) compliance under PSD2 regulations.

Businesses are responsible for ensuring they are compliant with any necessary financial regulations when using Lloyds.

Account & Pricing

A separate Lloyds merchant services account is required to use this plugin. The account must be set up directly with Lloyds before installing and configuring the plugin — it is not created during the plugin installation process.

To apply for a Lloyds account, visit: Lloyds Bank

Additional fees apply for payment processing services provided by Lloyds. These fees are separate from the cost of this plugin and are determined by Lloyds based on your business requirements and transaction volumes. For detailed pricing information, please visit the Lloyds website or contact their sales team directly.

Please note, Autify Digital cannot assist with the Lloyds account setup process or pricing enquiries. For account-related questions, please contact Lloyds directly through their website.

Additional requirements:

• For embedded payments (Payment.JS): REST API Key and API Secret from the Developer Portal, linked to your Store ID by Lloyds Bank.
• For Apple Pay: An Apple Developer account with a configured Apple Pay merchant identifier and certificates.
• For Google Pay: A Google Pay merchant account (for production use).

Customise Your Integration

Looking for something more specific? Get in touch to discuss any custom features or tailored configurations that might enhance your Lloyds Gateway integration for WooCommerce. Contact us via cardnet@autify.co.uk.

Trademark

Lloyds and Lloyds Bank are trading names of Lloyds Bank plc. Registered Office: 25 Gresham Street, London EC2V 7HN. Registered in England and Wales no. 2065. Lloyds Bank plc is authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority under registration number 119278.

Apple Pay and Apple are trademarks of Apple Inc., registered in the U.S. and other countries and regions. Use of the Apple Pay mark is subject to Apple’s guidelines and requires compliance with the Apple Pay Platform Web Merchant Terms and Conditions.

Google Pay is a trademark of Google LLC. Use of the Google Pay mark is subject to the Google Pay API Terms of Service and Google Pay Brand Guidelines.

All trademarks, service marks, and trade names referenced in this material are the property of their respective owners.

Support

For technical support, customization requests, or general inquiries:

• Email: cardnet@autify.co.uk
• Helpdesk: https://support.autify.co.uk/
• Visit: https://www.autify.co.uk

If you find this plugin useful, please leave a review on WordPress.org — it helps us a lot!

External Services

This plugin relies on several third-party services to provide its functionality. By using this plugin, you acknowledge that data will be transmitted to these external services as described below. Please review the respective terms and privacy policies.

1. Lloyds Bank Payment Gateway

Lloyds Bank is the merchant services provider that facilitates the payment processing relationship for all card transactions.

What data is sent:

• Customer billing information (name, address, email, phone)
• Customer shipping information (if provided)
• Payment amount and currency
• Transaction reference/order ID
• Store credentials for authentication

When data is sent:

• When a customer initiates a payment at checkout
• When processing refunds through the WooCommerce admin panel

Service Provider: Lloyds Bank plc

• Service Information
• Terms of Use
• Privacy Policy

2. First Data / Fiserv Payment Processing (IPG Online)

This service processes hosted payment page (redirect) transactions, Payment JS embedded payments, and refunds via the First Data API.

What data is sent:

• Store ID and API credentials
• Payment amounts and currency
• Order reference and customer billing/shipping address
• Card tokens (for tokenised payments and subscriptions)
• Refund details (for refund operations)

When data is sent:

• When a customer makes a payment via the hosted payment page or embedded form
• When a session is initialised for embedded payments (Payment.JS)
• When a merchant processes a refund from the order page

API Endpoints:

• Hosted Payment Page (Sandbox): https://test.ipg-online.com/connect/gateway/processing
• Hosted Payment Page (Production): https://www.ipg-online.com/connect/gateway/processing
• API (Sandbox): https://cert.api.firstdata.com/
• API (Production): https://prod.api.firstdata.com/

Service Provider: Fiserv (formerly First Data)

• Terms of Use
• Privacy Policy

3. First Data Payment JS Client Library

A JavaScript library loaded from First Data servers to render the secure embedded payment form (card number, expiry, CVV fields) on the checkout page. The library handles card data directly — no card details pass through your server. The plugin receives a payment token in return.

When data is sent:

• When the checkout page renders with the embedded payment method enabled

JavaScript Endpoints:

• Sandbox: https://lib.paymentjs.firstdata.com/uat/client-2.0.0.js
• Production: https://lib.paymentjs.firstdata.com/prod/client-2.0.0.js

Service Provider: Fiserv (formerly First Data)

• Documentation
• Terms of Use
• Privacy Policy

4. Apple Pay

Used to enable Apple Pay as an express payment method on product, cart, and checkout pages. Only active if Apple Pay is enabled in the plugin settings and the customer is on a compatible Apple device or browser.

What data is sent:

• Merchant identifier, site domain, and display name (sent to Apple during merchant validation)
• Payment request details (amount, currency, merchant info)
• Transaction token after customer authorisation (processed through the First Data / Fiserv API)

When data is sent:

• When a customer initiates an Apple Pay payment
• When validating the merchant session with Apple

API Endpoint: Apple Pay merchant validation endpoints (*.apple.com)

Service Provider: Apple Inc.

• Apple Pay for Developers
• Apple Pay Platform Web Merchant Terms
• Privacy Policy

5. Google Pay

Used to enable Google Pay as an express payment method on product, cart, and checkout pages. A JavaScript library is loaded from Google servers to render the Google Pay button and handle the payment flow. Only active if Google Pay is enabled in the plugin settings.

What data is sent:

• Payment request details (amount, currency, merchant info)
• Payment token data (encrypted by Google) and customer shipping/billing details (processed through the First Data / Fiserv API)

When data is sent:

• When a customer chooses to pay with Google Pay
• When the Google Pay button is loaded on the checkout, cart, or product page

API Endpoint: https://pay.google.com/gp/p/js/pay.js

Service Provider: Google

• Google Pay for Developers
• Terms of Service
• Privacy Policy

6. Autify Digital License API

Used to validate and manage the plugin licence. The plugin contacts Autify Digital’s licence server to verify that the licence key is valid and active.

What data is sent:

• Your website domain name
• Plugin version number
• Licence key (for activation and verification)
• Admin email address (for licence and support purposes)
• Admin contact name (if available)
• Activation status (active/inactive/deactivated)

When data is sent:

• When the licence is activated or deactivated
• When the licence is periodically synced via the background cron job

API Endpoint: https://plugin-licenses.autify.co.uk/wp-json/autifydigital/v1/plugin

Service Provider: Autify Digital Ltd

• Website
• Terms of Service
• Privacy Policy
• Contact: cardnet@autify.co.uk

Note: Licence activation is required to access premium support. The plugin’s core payment functionality operates independently of licence status.

Privacy Notice

Please review the privacy policies of all third-party services listed above to understand how your data and your customers’ data is handled. It is your responsibility to ensure compliance with applicable data protection regulations (such as GDPR) when using this plugin. For any questions about data handling or privacy, please contact: cardnet@autify.co.uk