CartModules: dLocal Payment Gateway

Accept Cross-Border Payments Across 40+ Countries in Your CS-Cart Store

Integrate dLocal — the leading cross-border payment platform for emerging markets across Latin America, Africa, and Asia — directly into your CS-Cart or Multi-Vendor store. Customers pay using their preferred local payment methods through a secure hosted checkout flow.

Key Features

• Dual Checkout Modes — Choose between redirect (hosted page) or inline (embedded Smart Fields) checkout
• On-Site Payment — Inline mode keeps customers on your store during payment
• Apple Pay & Google Pay — Accept wallet payments in inline mode on supported devices
• 40+ Countries — Accept payments from Latin America, Africa, and Asia in a single integration
• 300+ Local Payment Methods — Cards (Visa, MC, AMEX, Elo), PIX, Boleto, OXXO, SPEI, Nequi, PSE, Webpay, and more
• Redirect-Based Flow — No sensitive data touches your server (PCI SAQ A compliant)
• Multi-Currency Support — USD, BRL, MXN, ARS, CLP, COP, PEN, UYU, INR, ZAR, and many more
• HMAC-SHA256 Signed Requests — Secure API communication with per-request cryptographic signatures
• Webhook Notifications — Server-to-server updates for async payment methods (boleto, OXXO, etc.)
• Automatic Order Updates — Payment is verified via API on customer return and via webhooks
• Sandbox/Production Toggle — Switch between test and live environments from the admin panel
• Configurable Order Statuses — Map dLocal statuses (PAID, PENDING, REJECTED) to any CS-Cart order status
• Idempotent Callbacks — Duplicate callbacks and webhooks are safely ignored

Supported Countries (partial list)

Argentina, Bolivia, Brazil, Chile, China, Colombia, Costa Rica, Dominican Republic, Ecuador, Egypt, El Salvador, Ghana, Guatemala, Honduras, India, Indonesia, Ivory Coast, Kenya, Malaysia, Mexico, Morocco, Nigeria, Panama, Paraguay, Peru, Philippines, South Africa, Thailand, Turkey, Uganda, Uruguay, Vietnam

Supported Payment Methods (varies by country)

• Cards — Visa, Mastercard, AMEX, Elo, Hipercard, Naranja, Cabal
• Bank Transfers — PIX (Brazil), SPEI (Mexico), PSE (Colombia), Webpay (Chile)
• Cash/Voucher — Boleto (Brazil), OXXO (Mexico), Baloto (Colombia), PagoEfectivo (Peru)
• Wallets — Nequi (Colombia), Mercado Pago, DANA (Indonesia)

Requirements

• CS-Cart or Multi-Vendor 4.x
• PHP 7.1 or higher
• dLocal merchant account with API credentials (API Key and Secret Key)

How It Works

1. Customer selects dLocal at checkout and clicks "Place Order"
2. The addon creates a payment via dLocal's API with the REDIRECT flow
3. Customer is redirected to dLocal's hosted payment page with local payment options
4. Customer selects their preferred method and completes payment
5. Customer is redirected back to your store
6. The addon verifies the payment via API and updates the order status
7. For async methods (boleto, OXXO), a webhook updates the order when payment is confirmed

Checkout Modes

• Redirect (Default) — Customer is redirected to dLocal's secure hosted payment page
• Inline (Embedded) — dLocal Smart Fields JS SDK renders embedded card input fields directly on your checkout page, with support for Apple Pay and Google Pay

Installation

1. Go to Add-ons > Manage add-ons, click Manual installation, and upload the addon zip
2. Activate the addon and enter the license key
3. Go to Administration > Payment methods and create a new payment method
4. Select "dLocal Payment Gateway" as the processor
5. Enter your API Key and Secret Key from the dLocal dashboard
6. Select the target country and currency
7. Configure order status mappings as desired
8. Save and test with sandbox mode before going live

Security

• PCI SAQ A compliant — redirect flow, no card data on your server
• HMAC-SHA256 cryptographic request signing
• Webhook verification via API query (never trusts webhook body alone)
• Sensitive credentials masked in all log entries
• Idempotent processing prevents duplicate charges
• SSL verification enabled on all API requests