ZeroRTO Docs v1.0.0
Main Website Pricing Plans Merchant Portal
Bangladesh Payments • Multi-MFS & Card Aggregator

SSLCommerz COD-to-Prepaid Setup Gateway v4 API

Eliminate cash delivery failures across Bangladesh by converting COD orders into upfront payments covering bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Internet Banking.

SSLCommerz Aggregated Gateway Engine

bKash, Nagad, Rocket, Cards, NetBanking • All-in-One Gateway

Validator API v1 Server Validation Verified

How SSLCommerz COD Conversion Operates

When a courier flags a delivery failure, ZeroRTO offers an instant multi-wallet payment link:

1. Delivery Failed (COD) Customer requested delay
2. Multi-MFS Discount Link bKash, Nagad, Cards Supported
3. Order Marked PREPAID Zero cash risk / Guaranteed Doorstep delivery

2. How to Retrieve Store ID & Store Password

Obtained from your official SSLCommerz Merchant Onboarding approval email or merchant panel:

1. SSLCommerz Store ID

Your unique merchant identifier provided by SSLCommerz upon merchant account activation.

2. Store Password

Secret API password used to authenticate /gwprocess/v4/api.php link generation requests and server validation calls.

  1. Log in to your SSLCommerz Merchant Panel.
  2. In the left sidebar, navigate to My Stores / Integration Settings.
  3. Copy your Store ID and Store Password.

3. Exactly Where to Paste in the ZeroRTO Plugin

Open your WordPress Admin > click ZeroRTO > open the COD to Prepaid tab:

WordPress Admin > ZeroRTO > COD to Prepaid Tab
Step 1: Enable Toggle
COD to Prepaid Conversion Engine
Step 2: Set Discount Value
50
Step 3: Select SSLCommerz
SSLCommerz (Selected) Active Gateway
Step 4: Store ID
your_store_id_here
Step 5: Store Password
••••••••••••••••
Step 6: Copy IPN Webhook URL
Dedicated SSLCommerz IPN Webhook URL

Register as your SSLCommerz IPN (Instant Payment Notification) listener:

https://yourstore.com/wp-json/rescuedrop/v1/payment-webhook/sslcommerz
Save settings to bind SSLCommerz engine:
Step 7
Save All Settings →

4. Register IPN Webhook in SSLCommerz Portal

SSLCommerz must notify your store immediately when a customer pays via bKash, Nagad, or Cards:

https://yourstore.com/wp-json/rescuedrop/v1/payment-webhook/sslcommerz
  1. Copy your store's dedicated endpoint URL above.
  2. In SSLCommerz Merchant Panel, navigate to Integration Settings > IPN Settings.
  3. Enable IPN and paste your copied endpoint URL.
  4. Click Save IPN Settings.

5. Server-to-Server Validation API Security

Eliminating Fake IPN Spoofing

ZeroRTO never marks an order as paid simply by trusting an incoming IPN POST parameter. Upon receiving the notification, ZeroRTO immediately sends a background validation GET query to https://securepay.sslcommerz.com/validator/api/validationserverAPI.php using the transaction's val_id and your private store_passwd. Only when SSLCommerz returns an official VALID status is the order converted to Prepaid!

bKash Direct Next: Stripe Global Cards Setup