Online payments

Connecting your website to a payment gateway in Jordan and Saudi Arabia

A phone checkout screen with a credit card, a bank and a padlock

Your store or booking site is ready, and only payments are left. You contact a payment gateway provider and receive a list of documents, and the developer says the integration takes two days. Then a month goes by and the account still isn't active, because the return policy page is missing, or because your commercial registration doesn't list the activity you're selling. This happens again and again, and getting the steps in the right order avoids most of it.

How does a payment gateway work?

A payment gateway sits between your website and the banks and card networks. The customer enters their card details on a page or in fields that belong to the gateway, and the gateway requests approval from the issuing bank. Usually the customer also passes a 3-D Secure check with a code sent by their bank. Once the transaction succeeds, the gateway notifies your site and transfers the money to your bank account on settlement dates set out in the contract.

What are the usual requirements to activate a payment gateway?

The details vary between providers, and most of them ask for the following:

  • A valid commercial registration that covers the activity you'll be selling.
  • A bank account in the business's name.
  • IDs for the owners and authorized signatories.
  • A website that actually works, with your products or services and their prices.
  • Published pages for terms and conditions, return policy and privacy, with clear contact details.
  • A secure connection, meaning the site runs on https.

Some providers review the website themselves before approval, and some business activities need extra approvals or aren't accepted at all. Ask about this on your first call.

What is different between Jordan and Saudi Arabia?

In Saudi Arabia, most shoppers expect to pay with mada, along with Apple Pay and credit cards, and buy now, pay later services are widespread. Choose a provider licensed by the Saudi Central Bank (SAMA) that supports mada. In Jordan, the Central Bank of Jordan licenses payment service companies, cards are common, many people use CliQ for instant transfers, and cash on delivery remains an option that some customers ask for. We cover what a store needs in each market in the online store launch checklist.

If you sell in both countries, check that the provider supports both currencies and pays out to an account in each country. If it doesn't, you may need a separate provider for each market.

How can you connect your website to a payment gateway?

MethodHow it worksWhen it suits you
Hosted payment pageThe customer is sent to the gateway's page and then returns to your siteThe fastest option, and card data never passes through your server
Embedded fieldsCard fields appear inside your page and load from the gatewayA smoother experience while the data stays with the gateway
Direct API integrationYour server receives the card details and sends them onRarely right for a company website, because it puts heavy security requirements on you
Ready-made pluginAn official plugin from the gateway for WordPress or your store platformWhen your store runs on a platform the gateway supports

PCI DSS is the security standard for card data, and anyone who handles card data has to comply with it. The further card data stays from your server, the less is required of you.

What are the steps from start to first transaction?

  1. Choose a providerPayment methods, currencies, fees and settlement time
  2. Paperwork and reviewIn parallel with building the site
  3. Test environmentTest cards and every failure case
  4. Server notificationsPayment confirmation by webhook
  5. Go liveA small real transaction, then refund it
The path for connecting a payment gateway to your website

One technical point causes a lot of problems. Don't rely on the customer returning to the "payment successful" page to confirm the order. The customer may close the browser or lose their connection right after paying. Rely on the notification the gateway sends to your server, and verify it before you treat the order as paid. In the test environment, try a declined card, insufficient funds, the customer cancelling the transaction, and a partial refund. If you add Apple Pay on the web, there's a domain ownership verification step that goes through the gateway.

How do you handle refunds and disputed transactions?

Refunds are usually issued from the gateway's dashboard, in full or in part, and the money goes back to the customer's card within a period set by their bank. A dispute, or chargeback, is when the customer asks their bank to reverse a transaction they don't recognize or for something they never received, and the provider then asks you for proof. For every order, keep the invoice, the shipping address and the delivery tracking number or whatever proves the service was provided. A clear return policy reduces these cases, because the customer knows how to get their money back from you before turning to their bank.

What should you ask a payment provider before signing?

  1. Which payment methods are actually supported in my market, and do they include mada or CliQ?
  2. What is the fee per transaction, and are there monthly or setup fees?
  3. How many days until the money reaches my account?
  4. How do refunds work, and who pays their fees?
  5. Is there an official plugin for the platform my site runs on, and clear integration documentation?
  6. Who do I contact if payments stop?

We connect websites and online stores to payment gateways in Jordan and Saudi Arabia, and we prepare the policy pages and tests before launch, as part of our website design and development service. Tell us what you sell and in which country and we'll plan the activation steps with you.

Questions our partners ask

How long does it take to activate a payment gateway?

It depends on the provider, how complete your paperwork is and the review of your website. It can take anywhere from days to weeks. Start the application while the site is being built.

Do I need PCI DSS certification for my website?

If you use a hosted payment page or embedded fields from the gateway, far less is required of you, and a short self-assessment is often enough. Ask your provider exactly what it needs from you.

Written by the Visual Innovate team, the people who build, host and follow up systems, websites and apps for our clients in Jordan, Saudi Arabia, Oman and Egypt.

Are you our next Success Partner?

Tell us the problem as you see it. Within one working day we'll come back with how we understand it and a clear first step.