HomeProduct DocsAPI ReferenceChangelog
RecurlyAPI GuidesRecurly.jsWebhooksAPI ReferenceSupportBook demo
Product Docs

Checkout.com

Early access Checkout.com is currently available in early access. Contact [email protected] to request access.
Checkout.com is a global payment gateway that plugs into Recurly to handle recurring subscriptions, one-time payments, and 3D Secure authentication — across virtually any currency or region. Whether you're onboarding fresh or migrating from another gateway, setup follows a straightforward six-step process.
Available on all Recurly plans

Definition

Checkout.com is a global payment gateway that integrates with Recurly to manage financial transactions for recurring subscriptions and one-time payments. It supports a wide range of card brands, payment methods, and currencies worldwide, and includes built-in fraud detection that works together with Recurly.js to capture device and browser signals at the time of payment.
Best practices before you start
  • Checkout.com's fraud detection requires Recurly.js to collect browser and device data. If you're using 3D Secure (3DS), Recurly.js is also required. Passing raw card numbers directly via the API is not supported. See Recurly.js with stored billing information for guidance on tokenizing stored cards.
  • Ensure your Business Entity's Merchant Category Code (MCC) is filled in correctly before enabling 3DS.

Key details

FeatureDetails
Services that work with RecurlyRecurring subscriptions, payments (ecommerce and MOTO), 3D Secure
Supported operationsAuthorize and Capture, Purchase, Refund, Verify, Void, Recurring, Unscheduled MIT
Supported payment typesCredit card, Apple Pay, Google Pay
Supported card brandsVisa, Mastercard, Amex, Discover, JCB, Diners Club, Union Pay
Unified 3DS2 supportedYes
Card on file supportedYes
RegionsWorldwide
CurrenciesAll supported currencies
Additional feature supportBilling and shipping information, Level 2 data, Dynamic Descriptors, AVS/CVV checks, and line item passthrough

Set up Checkout.com with Recurly

Pricing and account setup For pricing and signup information for a new production Checkout.com account, contact your Checkout.com account representative directly.

Step 1 — Obtain your Checkout.com credentials

1

Retrieve your API keys from Checkout.com

Log in to your Checkout.com dashboard, go to Developers → Keys, and select Create a new key.

Scope your key carefully Avoid customizing key permissions unless you're certain no functionality will be blocked. If you do limit scopes, ensure at minimum that payments, gateway, disputes, search, and risk are enabled — even for features not yet in use, to avoid key changes later.

For additional guidance, see Checkout.com's documentation: Access and/or create API credentials and the Dashboard documentation.

If you plan to enable 3DS, you'll also need the following from Checkout.com before proceeding:

  • Your Acquirer BIN (6 digits)
  • Your Acquirer Merchant ID
  • Your Acquirer Country

These are used in Step 4. Gather them now so you have them ready.

Step 2 — Configure webhooks in Checkout.com

Recurly uses webhooks from Checkout.com to receive payment and dispute event notifications. You'll also generate a Signature key here, which you'll enter in Recurly in Step 3.

1

Open the webhook configuration page

In your Checkout.com dashboard, go to Developers → Webhooks and select Create configuration.

2

Name the configuration

Enter a descriptive name — for example, "Recurly production."

3

Enter the webhook destination URL

In the URL field, enter the Recurly callback URL below, replacing <MERCHANT_SUBDOMAIN> with your Recurly site's actual subdomain.

https://callbacks.recurly.com/checkout/<MERCHANT_SUBDOMAIN>

For example, if your Recurly subdomain is mywebsite, enter:

https://callbacks.recurly.com/checkout/mywebsite
Finding your Recurly subdomain Your subdomain appears in the URL when you're logged in to Recurly — for example, mywebsite.recurly.com. It's also shown under Configuration → Site Settings.
4

Select event types

To future-proof your setup, select all event types. At minimum, ensure payment events and dispute events are included.

5

Save and copy your Signature key

After saving, Checkout.com generates a Signature key (also called a Source Verification Key). Copy it — you'll enter it in Recurly in the next step.

Step 3 — Enter your credentials in Recurly

1

Open the payment gateway settings

In Recurly, go to Configuration → Payment Gateways and select Checkout.com from the available options.

2

Enter your Checkout.com credentials

Fill in all four fields using the values you collected in Steps 1 and 2.

FieldWhere to find it
API Public KeyCheckout.com dashboard → Developers → Keys
Channel IDCheckout.com dashboard → Developers → Keys
API Secret KeyCheckout.com dashboard → Developers → Keys
Source Verification KeyGenerated in Step 2 (Signature key)

Step 4 — Enable 3D Secure

Skip this step if you're not using 3DS.

Required before enabling 3DS Your default Business Entity must have both the consumer-facing website domain (URL) and your business's MCC value populated before you enable 3DS.
1

Enable 3D Secure

In the Checkout.com gateway configuration screen in Recurly, select Enable 3D Secure.

2

Enter your 3DS credentials

Fill in your Acquirer BIN, Acquirer Merchant ID (CAID), and Acquirer Country — all obtained from Checkout.com directly.

Step 5 — Enable currencies

Select the currencies your Checkout.com gateway should accept. You can add or change currencies at any time — choose only from those you're approved to process.

Step 6 — Save your gateway configuration

Once you've configured everything, select Add Payment Gateway. If you're updating an existing configuration, the button reads Update Payment Gateway instead.

Additional configuration

Address and card code verification

You can configure Recurly to automatically reject transactions where the billing address or CVV doesn't match what the card issuer has on file. These settings apply across all gateways — they're not Checkout.com-specific.

Enable Address Verification (AVS)

  1. Go to Configuration → Payment Settings.
  2. Scroll to the Address Verification Check section.
  3. Select your preferred AVS rule.
  4. Select Save Changes.

Enable Card Code Verification (CVV)

  1. Go to Configuration → Payment Settings.
  2. Scroll to the Credit Card Verification Code Check section.
  3. Set the option to Enabled. When enabled, transactions with an invalid or mismatched CVV are rejected based on issuer feedback.
  4. Select Save Changes.

Test your integration

  1. Go to Configuration → Payment Gateways.
  2. Find your Checkout.com configuration and select Options → Test Configuration.

If your credentials are correct, Recurly will confirm a successful connection.

Go live

Once testing passes, your gateway is ready for real transactions. Monitor activity in both Recurly and your Checkout.com dashboard to confirm everything is processing as expected.

PCI compliance Ensure you comply with PCI Data Security Standards (PCI DSS) when handling card data. Contact [email protected] or your Checkout.com representative with any compliance questions.

Production and sandbox behavior

Production and sandbox environments in Checkout.com are entirely separate systems with distinct endpoints. Keep the following in mind when managing your environments:

  • If you create a Checkout.com gateway configuration while your Recurly site is in either Production or Sandbox mode, you can control which Checkout.com endpoint — production or sandbox — your transactions hit.
  • If you ever change your Recurly site's mode (for example, from Sandbox to Production), your existing gateway tiles will stop working. You must create new gateway configurations for the new mode and disable the old ones.
  • Best practice: Keep your site in a consistent mode and use a dedicated development site for integration testing. Set that site to Development mode before adding gateway accounts, and keep it there for the duration of your testing.
Going live from a copied configuration When going live, you cannot simply copy your sandbox gateway configuration. The copied gateway does not carry the correct site identifiers for the production environment — you must re-onboard Checkout.com from scratch in your production site.