Checkout.com

Connect Checkout.com to PayLexer to accept card, wallet, and local payments worldwide through a hosted, 3DS-enabled payment page with signed webhooks.

Checkout.com is a global payment processor based in London. It supports card payments, digital wallets, and local payment methods for merchants across the UK, EU, US, GCC, and APAC. With PayLexer, shoppers pay on Checkout.com's secure, 3DS-enabled page, then get redirected back to your site once payment is complete.

Supported Regions (Merchant Accounts): UK, EU, US, GCC, and APAC - view full list
Supported Currencies: AED, AUD, BHD, CAD, CHF, CZK, DKK, EGP, EUR, GBP, USD - view full list

Supported Features

Hosted, 3DS-enabled checkout page that handles card entry and SCA
Card payments, digital wallets, and local payment methods
Broad multi-currency support, including 2-decimal, 3-decimal, and zero-decimal currencies
Dual payment confirmation through both a redirect callback and a signed webhook
Server-side payment verification before the shopper reaches your confirmation page
Refunds processed directly from PayLexer

Before You Start

Make sure you have:

Checkout.com Account - Don't have one? Sign up for Checkout.com →
PayLexer Account - Required to configure the integration. Create your account →
A website where you want to integrate

Looking for a different payment processor? View all supported gateways →

Configuring Checkout.com

You need a Secret Key, Public Key, and Webhook Signature Key from Checkout.com for this integration.

Getting API Credentials

Open the Checkout.com Dashboard

Go to Keys

Navigate to Developers → Keys.

Create and copy your Secret Key and Public Key

Click Create key to generate a new key pair for the environment you are setting up. Once created, copy the Secret Key and Public Key.

Sandbox keys begin with sk_sbox_ / pk_sbox_.
Live keys begin with sk_ / pk_.

The Secret Key is shown only once when generated. Copy and store it securely before leaving this page - you cannot view it again later.

Copy your Processing Channel ID

Navigate to Settings → Business → Processing channels and copy the Processing Channel ID (begins with pc_).

Adding Credentials to PayLexer

Open PayLexer Dashboard

Copy the Webhook URL

Copy the Webhook URL shown on the Checkout.com configuration page. You will need it when registering the webhook in Checkout.com in the next section.

Enter your credentials

Paste your Live and Test credentials into the respective fields:

Secret Key (sk_...) - the live secret key from Checkout.com
Public Key (pk_...) - the live public key from Checkout.com
Processing Channel ID (pc_...) - your live processing channel ID from Checkout.com
API Base URL - your live API host (e.g. https://xxxx.api.checkout.com)
Secret Key (sk_sbox_...) (Test) - the sandbox secret key from Checkout.com
Public Key (pk_sbox_...) (Test) - the sandbox public key from Checkout.com
Processing Channel ID (pc_...) (Test) - your sandbox processing channel ID from Checkout.com
API Base URL (Test) - your sandbox API host (e.g. https://xxxx.api.sandbox.checkout.com)

Understanding Live/Production and Sandbox Settings:

Environment	Purpose
Live / Production (Mandatory)	Used for real transactions. Cannot be empty, even when testing.
Test / Sandbox (Optional)	Used for testing only. No real money is processed.

How PayLexer selects credentials:

Debug/Test mode ON → Test credentials are used
Debug/Test mode OFF → Live credentials are used

Test and save

Click Test Connection to verify your credentials, then click Save Configuration.

Configuring Webhooks (Mandatory)

Webhooks enable real-time payment updates and significantly improve reliability.

Benefits of Webhooks:

Instant payment status updates
Automatic refund processing
Dispute notifications

Checkout.com sends an HMAC-signed webhook with a Cko-Signature header for authoritative, server-to-server confirmation. Because the Hosted Payments Page API has no per-request webhook URL, you register the endpoint once in the Checkout.com Dashboard.

Create a new webhook

In the Checkout.com Dashboard, navigate to Developers → Webhooks and click Create configuration(or Edit configuration if one already exists).

Enter a Name for the webhook and paste the PayLexer Webhook URL into the Endpoint URL field.

Generate the Signature Key

Under Webhook keys, find the Signature Key section and click Generate key. A UUID-format key will appear - copy it immediately.

Use the Signature Key, not the Authorization Header Key. PayLexer uses the Signature Key to verify the HMAC on every notification. Store the generated value before saving - you will need to paste it into PayLexer.

Select payment events

Scroll to the Events section and select the payment-related event categories relevant to your integration. At minimum, enable events covering payment captures, declines, refunds, and cancellations.

Select your processing channel

Scroll to Entities and processing channels and select the processing channel this webhook should receive events for.

Save and add the Signature Key to PayLexer

Click Save changes in the Checkout.com Dashboard.

Return to Payment Gateways → Checkout.com in your PayLexer dashboard. Paste the Signature Key you copied into the Webhook Signature Key field and click Save Configuration.

PayLexer will now verify every Checkout.com notification using HMAC-SHA256 before updating any order.

Integrate Checkout.com to Your Website

If you have already added and configured your site, you can enable Checkout.com in your existing setup.

Go to Websites

Navigate to Websites in your PayLexer dashboard.

Edit your website

Click the Edit Icon of your added website.

Enable Checkout.com

Click the checkbox to enable Checkout.com for the website.

Checkout.com is now active for this website. Run a test transaction before switching off Debug/Test mode.

If you haven't added a website yet, Continue to Add Your Website →

Troubleshooting

Best Practices

Test in sandbox before enabling production. Use sandbox keys and Checkout.com's test cards to complete a full payment before switching to live.
Configure webhooks so payment, refund, and dispute updates sync in real time.
Keep your Secret Key and Webhook Signature Key confidential, and rotate them if you suspect exposure.
Always include the Processing Channel ID. You can find it under Settings → Business → Processing channels in the Checkout.com Dashboard.
Enter the API Base URL for both Live and Test environments. You can find your account's API host in the Checkout.com Dashboard or your onboarding documentation from Checkout.com.

FAQs

Still Have Questions?

Checkout.com Support: Checkout.com Documentation
PayLexer Support: Contact Support

For API references and advanced configuration, see the Checkout.com developer documentation.

Was this page helpful?