Release Notes

Added

• Paid Payment Detection setting for Pay by Link: instant platform webhook (default), a 5-minute polling cron for stores not reachable from the internet, or both combined.
• Payment links carry the store's webhook URL and detection mode in their metadata, replacing the dashboard-side webhook-mapping registration.
• Orders parked awaiting a payment outcome are settled by a new hourly sweep: paid intents complete the order, unpaid ones cancel it, in-flight ones wait for the next run.

Fixed

• Paid orders are no longer cancelled when the browser-side payment confirmation is lost: the payment status is verified before any frontend-initiated cancellation, paid orders are completed instead, and a retried cancel cannot invoice or email twice.
• Refreshing or navigating away mid-payment no longer cancels an order whose real payment state cannot be determined.
• Payments still processing after confirmation (bank redirects) are no longer cancelled as failed; the order completes once the payment succeeds.
• Pay by Bank no longer fails at checkout with a capture-method error.
• Online captures and refunds use the currency the payment was actually taken in; zero-decimal currencies such as JPY are no longer captured at 100 times the amount.
• Pay by Link and Terminal payments in zero-decimal currencies are no longer captured at one hundredth of the amount.
• MO/TO and Terminal orders on Base Currency stores now charge the base amount in the base currency.
• Smart Capture expiry defers instead of cancelling when an order's payment status cannot be determined, and completes orders whose payment actually went through.
• Recovery payments whose completion callback never reached the store are completed on the next cron run, with their stock reservation restored.
• Soft-fail recovery reminders are sent at most once per notification number.
• The payments monitor and orders grid no longer re-save fraud details on every check, and the 3D Secure column and destination-charge reference are captured again.
• The Standalone promotion discount row no longer shows an empty label in the checkout order summary.
• The Standalone promotion requires a Minimum Order Total greater than zero and no longer advertises a discount no order can earn.
• A partial invoice smaller than the promotion discount no longer saves with a negative grand total; the remainder carries to the next invoice.
• A re-issued invoice after a cancelled one receives the promotion discount again instead of capturing more than the authorised amount.
• The discount code input on the express product page no longer zeroes the payment sheet.
• The express wallet no longer answers with a server error when the shopper has no active cart.
• The express-checkout wallet button now appears on stores that enforce a Content Security Policy: the storefront's inline scripts, event handlers and styles go through Magento's secure renderer.
• The admin panel no longer reports Content Security Policy violations.
• Payment links, checkout links and recovery links sent by SMS or WhatsApp use short underscore-free URLs so phone apps keep the whole link tappable, including admin resends.
• Pay by Link fails with the platform's own error message instead of handing the customer a bare paywith.brippo.com link when link creation misfires.
• Send Payment Link is refused on orders that are already paid, and the orders-grid action says so when no payment link is stored.
• The "Recover with" popup on the admin order view tolerates apostrophes, backslashes and line breaks in names and links.
• The file-integrity monitor no longer reports server-side image optimization as tampering.
• Admin support links now point to support@help.brippo.com.
• Completing an order whose payment is awaiting capture no longer crashes on the capture-method lookup, which was killing the payments monitor, the cancellation guard and the recovery sweeps.
• A single order failing with a PHP engine error no longer aborts a whole sweep or payments-monitor run; the failure is logged and the run continues with the next order.
• A retried online refund can no longer refund the same money twice: every online refund reconciles against the payment's refunded total first and is aborted if Stripe already holds more.
• Orders paid with the Standalone method now carry the promotion discount, so invoices and credit memos are raised for the discounted total instead of the full one.
• Recovery pages no longer boot the pay-checkout placement scripts, so they stop throwing a console error and re-requesting configuration on every load.
• Pay by Link orders paid on the Brippo hosted payment page are now completed as soon as the payment goes through, whether or not the payment is captured straight away; until now only links paid through Stripe-hosted checkout reached the store.
• SMS and WhatsApp messages are sent again in test mode: the test-mode flag never reached the platform, so nothing was delivered. Live mode was unaffected.

Added

• New "Brippo MO/TO from Backend" payment method: admins take phone and mail orders by keying the card into a Stripe Payment Element on the order-create page, so card details never pass through Magento.
• Optional payment-method promotion for the Standalone checkout: automatic order discount (first-order and repeat amounts, minimum order total, end date, own totals line everywhere, configurable badge next to the payment method title) applied when the customer pays with the standalone method — no voucher code needed.
• Send Payment Link button on the admin order view for Pay by Link orders, delivering the payment link by email, SMS and/or WhatsApp, also reachable as a row action in the orders grid.
• Custom Title setting for the wallets entry in the checkout payments list, overriding the name auto-generated from the available wallets.

Fixed

• Pay by Link with the "Brippo Hosted" checkout type now sends the customer to Brippo's own hosted checkout page instead of Stripe's payment-link page, on the order email, the order view and the admin resend alike.
• The file-integrity scan now evaluates composer source installs (git clone in vendor/) instead of classifying them as developer checkouts and never checking their files.

Added

• File-integrity scan every 30 minutes: installed module files are compared against the official release manifest and tampering (modified, missing or dropped files) is reported to the Brippo platform.
• The client-side PaymentMethod id is forwarded at payment-intent creation so the Brippo firewall can apply card-fingerprint block rules.
• A "Keep the Checkout Shipping Address" setting (on by default) in the wallets express checkout Checkout placement, to control whether the wallet may replace the address the shopper entered in the checkout.

Fixed

• Recover Checkout now recognises a recovery even when the recovered order's total changed (coupon, different shipping method, offline payment), and the duplicate-order check compares the right customer.
• The checkout wallet buttons (express checkout element and the legacy payment request button) no longer ask for, nor apply, the wallet account's shipping address when the shopper already entered one in the checkout, so orders ship to the typed address.
• Closing the admin send-to-terminal popup now cancels the pending handoff, so the terminal app stops waiting for a card on an order the admin walked away from.

Added

• Complete German, Spanish and Dutch translations, and full coverage for the existing French and Italian ones (storefront, checkout, emails and admin).

Fixed

• Recovery and Pay by Link emails, and recovery SMS/WhatsApp messages, now render fully in the store's language — the action buttons, greetings and default message bodies were previously hardcoded in English.
• Express Checkout orders no longer lose the phone number provided by the Apple Pay / Google Pay wallet.

Added

• CSP violation reports from the checkout and Pay by Link pages are now sent to the Brippo platform for central whitelist-gap detection.

Fixed

• The recovery pay page no longer reports bundle or configurable orders as out of stock when their child products are in stock.
• Smart Capture expiry now also cancels overdue trying-to-recover orders left in state new or pending payment, releasing the stock they were holding.
• Express Checkout frontend TypeError when initializing on an out-of-stock product page.
• PHP deprecation warning when placing a backend Pay by Link MOTO order.
• Restored PHP 7.4 compatibility and added a PHP 7.4 CI compatibility check.
• Consistent escaping in the payment-links admin grid across PHP versions.
• Trimmed the CSP whitelist so the store's CSP header stays under Apache's 8KB limit, avoiding empty 500 responses on some hosting stacks.
• Smart Capture expiry now retries orders whose cancellation previously failed, so stuck backlogs drain automatically.
• Platform-service notifications (order fulfillment, receipts, monitors) no longer fail with 400 errors after a JSON platform call in the same process.

Fixed

• Smart Capture expired orders on hold now cancelled correctly instead of staying on hold forever.

Fixed

• Fatal error when saving an order that has no status yet (e.g. PayPal orders on first save).

Fixed

• Admin pages rendering unstyled when CSS merging is enabled.

Added

• Recover Checkout: admin settings to customise the default email and SMS body in the "Recover with Brippo" popup.
• Fraud firewall: customer risk profile attached to payments so the Brippo API can step up 3D Secure or block high-risk payments.
• Checkout funnel analytics events sent to the Brippo reporting service.
• Payment settings snapshot reported on configuration save for drift detection.

Changed

• 2026 brand refresh for the admin UI and transactional emails.
• Recover Checkout links now use opaque tokens instead of order parameters in the URL.
• Improved built-in default recover email body wording.
• "Recover with Brippo" popup: clarified SMS message field and WhatsApp template behaviour.
• Removed obsolete uncaptured-payments count cron and table.
• Payment analytics now post directly to the Brippo reporting service.
• All recovery attempts (automatic, soft fail, manual) now tracked per channel for reporting.
• Recovery decline code carried through the recovery flow for reporting attribution.

Fixed

• Security: order-cancellation endpoints now verify the order belongs to the current checkout session.
• Intermittent Express Checkout (Apple Pay / Google Pay) button mount error on first load.
• Apple Pay / Google Pay wallets charging without tax when a deferred tax provider (e.g. AvaTax) is in use.
• Apple Pay / Google Pay wallet sheet now shows an itemised breakdown with explicit tax rows.

Added

• Terminal: new "Card Input Method" admin setting to pre-select or lock Card Present / MO/TO in the "Process Payment in Terminal" popup.

Fixed

• 3D Secure failures caused by missing *.stripe.network host in CSP whitelist (added to connect-src and frame-src).
• Amasty Gift Card amounts not applied at order submit; totals are now recollected before submit so gift card address attributes reach sales_model_service_quote_submit_before observers. Also applies to Pay by Link.
• Terminal: duplicate customer email and card input option in the admin "Process Payment in Terminal" popup.
• Stripe loading now skipped for search-engine bots, improving SEO crawl performance; polling timeout raised from 3s to 6s for real users so slow connections don't bail early.
• Bot user-agent regex tightened to avoid false matches on real browsers.

Added

• Custom checkout selector for 3rd party checkout extensions.

Fixed

• Apple Pay and Google Pay GB postcode handling for full postcodes without spaces (e.g. "YO266LB") and lowercase postcodes.
• "Include Wallets" setting now hides Apple Pay and Google Pay on the main checkout when disabled.
• Friendly error message when placing an order with an empty cart.
• Currency stored correctly on order payment information.

Added

• Standalone Pay by Link email template for payment links sent without an order context.

Fixed

• Apple Pay GB postal code fix not triggering when postcode has trailing space.

Added

• Pay by Link new standalone option and admin manager.
• Brippo pay checkout for paying pay by links.

Added

• Sanitise addresses to avoid invalid characters.
• Recover checkout stats and improvements.

Added

• Failsafe for billing/shipping address telephone field.

Added

• Security validations to admin controllers and configuration endpoint.
• Refactor Checkout Form with improved security and performance improvements.
• Implement customer event logging system.
• Add Mageside OSC support for Wallets express.
• Improved place order button locks while re-rendering.

Added

• Legacy Checkout Card Element.
• Filter card brands for ECE and Checkout Form.

Fixed

• Resolved possible double rendering for Checkout Form and performance issues.

Added

• Automatic Async capture mode.

Added

• Automatic processing of uncaptured payment orders in NEW state.
• Failsafe and notification for orders going straight to complete instead of processing.

Fixed

• Frontend serialization issues.
• City errors with restricted characters.
• Admin get config issues.

Fixed

• Klarna serialization issues on occasional instances.
• Fix cancelled quantities when recovering an order.
• Retry frontend confirmation when "object in use" error.
• Invalid website id when website and store have uncorrelated ids.

Added

• added setting to specify which logos are displayed for PayByLink

Fixed

• PayByLink error "enter a valid payment method and try again"

Added

• Support for latest Hyvä Themes and Hyvä Checkout.

Added

• Wallet Express Checkout payment list mode.
• Take delivery estimate from cart page for Wallet Express Checkout.
• Admin tool for manually setting order as processing.

Fixed

• Configuration endpoint 404 error when store domain includes folder.

Added

• Receipt for Backend Terminal orders.
• Billing data ported to Brippo Portal for Backend Terminal orders.

Fixed

• PHP 7.3 support issues.

Added

• Standalone Checkout, with Pay by Bank, Klarna and Billie support.

Fixed

• API key being overridden by **** if config re-saved.

Added

• Improved general order flow and payment logs/analytics.
• Recover checkout signature to avoid exposing customer addresses.

Fixed

• Form key error on product page loaded the first time for Wallets Express Checkout.
• PHP 8.4 compilation warnings.

Added

• Wallets Express Checkout regenerate button if removed.
• Recover Checkout general improvements.
• Pickup input values feature.

Fixed

• Fix for Deprecated Error: explode() Passing Null to Parameter #2

Added

• Soft Fail recovery.

Changed

• Improved Recover Checkout analytics and general fixes.

Fixed

• GetPaymentMethods error in admin when service not ready.

Added

• Wallet button not showing on mobile

Added

• PHP 8.4 and Magento 2.4.8 support.

Fixed

• GB postal code failsafe for cutted codes fix.

Fixed

• CSP issues with 3ds popup on some browser versions.
• Multi-currency setting not being picked up.
• Fixes on customer refresh failsafe.

Added

• Checkout form payment methods configuration.

Fixed

• Amasty rewards points compatibility

Fixed

• errors related to missing shipping data

Changed

• checkout form initialization (retry)

Added

• MageSide support.
• Block customers by group.

Fixed

• Recover checkout not loading.
• Error on specific use case: can't make payment missing data.

Added

• Terminal payment method now supports card present mode as well as MO/TO.

Changed

• Merged frontend package.

Fixed

• Shipping restrictions issue.

Added

• New Terminal MOTO payment method.

Fixed

• Recover orders cron failing on some PHP versions.

Fixed

• Recover checkout automatic notifications disabled by default. Require service to be ready.

Fixed

• 2FA not working for admin.

Added

• Recover checkout.

Fixed

• Rounding issue in amount monitor check.

Changed

• Curl library fixes for some magento stores.

Changed

• New Connected Account setup flow.

Changed

• Order status new scheme. Brippo custom statuses introduced.

Added

• 3DS result column in Order Grid.

Added

• Authorize-only order status change option.
• Klarna & ClearPay support.

Fixed

• Monitor cancelling Pay by Link orders

Fixed

• Paypal express support exception.

Added

• Paypal integration support.
• Duplicate payments notification fixes to avoid false positives.

Changed

• Register domain improvements.