Hosted payment gateways
On this page
A hosted gateway is a card processor that shows its own secure payment page. You open a merchant account with the gateway, paste your keys into Kartlo, and at checkout your shoppers are sent to the gateway's page to pay. The money goes to your gateway account and is paid out to your bank by the gateway.
Card details are typed on the gateway's page, never on Kartlo. Kartlo takes no cut of these payments; you pay only your gateway's own rates.
Supported gateways#
These gateways are listed under Card payments in SettingsPayments and can take real payments:
| Gateway | Countries | What shoppers can pay with |
|---|---|---|
| Paymob | United Arab Emirates, Egypt, Saudi Arabia, Oman | Cards and Apple Pay |
| Tap Payments | United Arab Emirates, Saudi Arabia, Kuwait, Bahrain, Qatar, Oman, Egypt, Jordan | Cards, Apple Pay, Google Pay, mada, KNET and Benefit |
| Ziina | United Arab Emirates | Cards, Apple Pay and Google Pay, settled in AED to your Ziina business wallet |
| Mamo | United Arab Emirates | Cards, Apple Pay and Google Pay |
| PayTabs | United Arab Emirates, Saudi Arabia, Egypt, Jordan, Oman, Kuwait, Qatar, Iraq | Cards on the PayTabs page |
| Telr | United Arab Emirates, Saudi Arabia | Cards on the Telr page |
| Network International | United Arab Emirates, Saudi Arabia | N-Genius: cards, Apple Pay and Samsung Pay |
| Checkout.com | United Arab Emirates, Saudi Arabia, Kuwait, Bahrain, Qatar, Oman, Egypt, Jordan | Cards, Apple Pay and Google Pay |
| Amazon Payment Services | United Arab Emirates, Saudi Arabia, Egypt, Kuwait, Qatar, Bahrain, Oman, Jordan | Cards, Apple Pay, mada and local methods |
| noon payments | United Arab Emirates, Saudi Arabia, Egypt | Cards, Apple Pay and local methods |
Each gateway only works for the currencies it supports. If your store currency is not one of them, that gateway is not offered at checkout even when it is switched on. For Paymob, the account country you pick must match your store currency.
Stripe is set up differently, through a form Stripe hosts. See Stripe card payments.
Before you connect#
Open a merchant account with the gateway first. Gateways usually ask for:
- Your trade licence.
- An Emirates ID or other ID for the owner.
- A business bank account (IBAN) for payouts.
Most gateways give you test keys before your account is approved for real money. You can connect with test keys, check that everything works, then replace them with live keys.
Connect a gateway#
To connect a hosted gateway:
- Open SettingsPayments.
- Under Card payments, find the gateway and click Connect followed by its name, for example Connect Ziina.
- A settings panel opens on the left. Fill in the fields. Each field explains where to find the value in the gateway's dashboard.
- Click Connect. Kartlo checks the keys with the gateway before saving. If the gateway rejects them, you see the reason and nothing is saved.
- When the gateway shows Connected, make sure its switch is on so it is offered at checkout.
- Place one small test order and check that it turns paid by itself.
Secret values are encrypted and never shown again after saving. To change a key later, click Settings on the gateway and paste the new value. Fields you leave empty keep their saved value.
Each connected gateway shows whether it is in test or live mode, for example Test mode, Live, Sandbox or Production, and the date it was connected.
What each gateway asks for#
| Gateway | Fields |
|---|---|
| Paymob | Paymob country, Secret key, Public key, API key, HMAC secret, Integration IDs. Connect checks the integration IDs by opening one unpaid 1.00 checkout in your Paymob account. Nothing is charged. |
| Tap Payments | Secret key |
| Ziina | API token, Mode (Live or Test), Webhook secret (optional) |
| Mamo | Environment (Production or Sandbox), API key, Webhook auth header (optional) |
| PayTabs | PayTabs region, Profile ID, Server key |
| Telr | Telr store ID, Auth key, Mode (Live or Test) |
| Network International | Country, Environment, Outlet reference, API key, Webhook header value (optional) |
| Checkout.com | Secret key, Processing channel ID, Account prefix (optional), Webhook signature key (optional) |
| Amazon Payment Services | Environment, Merchant identifier, Access code, SHA type, SHA request phrase, SHA response phrase |
| noon payments | Environment, Country, Business identifier, Application identifier, Application key, Order category (optional), Webhook secret (optional) |
Webhook address#
Ziina, Mamo, Network International, Checkout.com, Amazon Payment Services and noon payments let you add a webhook, so the gateway tells Kartlo the moment a payment succeeds. The settings panel for these gateways shows a Webhook address with a Copy button and short instructions.
The webhook is optional for these gateways. Without it, payments still settle when the shopper returns to your store after paying. Network International must approve the address before it sends updates.
The other gateways need no webhook setup; Kartlo handles it for you.
What shoppers see#
When a gateway is connected and switched on, checkout shows a single Card, Apple Pay or Google Pay option on the payment step. When the shopper places the order:
- The order is created in your store as unpaid.
- The shopper is sent to the gateway's secure page to pay.
- After paying, the shopper comes back to their order page on your store.
- Kartlo confirms the payment with the gateway and marks the order paid.
The shopper must give an email address to pay by card. A payment smaller than the order total is never treated as full payment.
Card checkout also depends on Card (Credit/Debit) being ticked in your payment methods. See Cash on delivery and manual methods.
Refunds#
Paymob, Ziina, Amazon Payment Services and noon payments: refund on the order in Kartlo with the method Card. Kartlo sends the refund to the gateway, and records it only after the gateway accepts it. The gateway's refund number is saved as the reference. Your gateway balance must cover the refund. See Returns and refunds.
Every other hosted gateway:
- Refund the payment in your gateway's own dashboard.
- Record the refund on the order in Kartlo, so your order and reports show the right amounts.
Pay later#
The Pay later card in the same settings lists instalment providers.
- Tamara lets shoppers split the total into instalments or pay later. Connect it with your Tamara API token and Notification token, then add the webhook address shown in the panel to the Tamara partner portal. Without the webhook, an approved payment never reaches Kartlo. At checkout it shows as a separate Tamara option for supported currencies.
- Tabby lets shoppers pay in four instalments in AED or SAR. Paste your merchant code and secret key; Kartlo registers the webhook with Tabby for you. See Tabby instalments.
Disconnect a gateway#
To stop using a gateway, click Disconnect on it. To pause it without removing your keys, turn off its switch instead.