Spain Runs on Redsys. Your Store Should Too.
Full EMV 3DS2 compliance, inSite card collection, saved card vault, subscription autopilot, and one-click admin refunds — the complete Redsys TPV Virtual integration for J2Commerce on Joomla.
Everything the Redsys REST API Actually Supports
Not a redirect wrapper. Not an abandoned codebase from 2019. A complete Redsys integration built on the native Joomla 6 architecture.
inSite Card Collection
The card form loads directly from Redsys infrastructure. Raw card numbers never pass through your Joomla server. PCI scope reduced to the absolute minimum — SAQ-A. Sleep well.
Full EMV 3DS2 / PSD2 Compliance
The plugin handles the complete authentication sequence — frictionless approvals for trusted cards, challenge flows when the bank requires it. European banking law met, automatically.
Saved Card Vault
Returning shoppers pick their saved card and check out in one click. No re-entering numbers. No hunting for wallets. The token lives on your server — the raw card never does.
Subscription Autopilot
Recurring renewals charge the saved card automatically. Orders created. Statuses updated. Confirmation emails out. You made money while you slept. That's the whole point.
Admin Refunds and Voids
Full refund. Partial refund. Same-day void before settlement. All from the J2Commerce order screen. One button. One confirmation. Authorization code logged. Done. No portal logins.
Automatic Soft-Decline Retry
When the bank soft-declines an initial attempt, the plugin retries automatically with forced strong authentication. Sales that other integrations lose become sales you keep.
Customer Card Self-Service
Shoppers manage their saved cards in My Account — see the brand, the last four digits, the expiry. Remove cards they no longer want. Without emailing your support team.
Geozone and Cart-Total Gating
Show Redsys only to customers inside Spain. Set a minimum or maximum cart total. Surcharge with a percentage fee, a flat amount, or both — tied to a tax profile. Your rules, your store.
Configurable Status Routing
Choose which J2Commerce order status fires on payment, on refund, on void. Every outcome mapped. No manual status updates. Your order workflow stays exactly as you designed it.
PCI SAQ-A Scope. PSD2 Compliance. Both. Automatically.
The inSite system collects card data inside Redsys's own infrastructure — embedded in your checkout page, invisible to your server. Every transaction then runs through the full EMV 3DS2 authentication sequence: frictionless when the bank approves without challenge, or a secure authentication popup when required. When the bank soft-declines the first attempt, the plugin retries with forced strong authentication. It handles the hard parts so you don't have to think about them.
- Raw card numbers never reach your Joomla server
- Three-step 3DS2 flow handled in the browser via AJAX
- Frictionless or challenge — whichever the bank requires
- Automatic soft-decline retry recovers borderline authorizations
Saved Cards. Subscriptions. One Click.
Returning shoppers see their saved cards at checkout — brand icon, last four digits, expiry date, one click to pay. New card? The inSite form loads. Want to save it? Check a box. For subscriptions, the card token powers every renewal automatically. No customer action required. No billing failures from an accidentally deleted card — the plugin guards active subscription tokens from removal.
- Visa, Mastercard, Amex, JCB, Diners, UnionPay brand icons
- Saved card deduplicated — same token never stored twice
- Automatic renewal billing for subscription orders
- Active-subscription guard prevents accidental billing breaks
Refunds, Voids, and Partials — Without the Portal
Every admin action runs from the J2Commerce order screen. Full refund? One button. Partial refund? Enter the amount, confirm. Same-day void before settlement? One click, authorization cancelled. The order history logs the Redsys authorization code for each action. Order statuses update automatically to whichever status you configured for that outcome. Your accounts team has a clean paper trail without ever touching the Redsys administration portal.
- Full refund with running total to prevent over-refunding
- Partial refund modal with maximum amount enforcement
- Void (cancel) for same-day pre-settlement cancellations
- Authorization code logged to order history on every action
Real-World Use Cases
A clothing boutique in Barcelona is upgrading from an older Joomla setup to Joomla 6 with J2Commerce. Their acquiring bank is Sabadell — the TPV Virtual contract is already in place. They're not changing banks; they just need the new store connected.
Install the plugin. Enter the FUC, terminal number, and HMAC signing key. Enable sandbox mode. Run a test transaction — 3DS frictionless approval, then a challenge flow, then a refund. Everything logs cleanly. Flip to live. Done.
Their existing Spanish customer base can pay exactly the way they always have. No "why isn't my card working" emails during the migration. The 3DS prompts behave identically to every other Redsys-connected checkout they've used. Trust maintained, conversion protected.
A monthly gourmet food subscription — €45 per month, shipping across Spain and Portugal. Renewals are everything. A failed renewal means a customer lost.
With saved card tokenisation and automatic subscription renewal, every monthly charge fires without any customer action. Their card is on file. The renewal fires. The order is created. The label prints. Repeat indefinitely.
When a card expires, the expired-card indicator appears in the shopper's My Account. They update it themselves. No support ticket. No missed billing. Fewer churned subscribers — which at €45/month per head adds up fast.
A restaurant equipment supplier in Madrid. Average order value: €1,800. Some wholesale clients want to pay by card. The supplier wants the card authorized and held while the invoice is finalized — in case specifications change before shipment.
When the client updates their order details, the admin can void the original authorization from the order screen with one click. No settlement charge has happened yet. A new payment link goes out. Clean slate.
After delivery, if there's a line-item adjustment, partial refund from the order screen handles it. The order history shows every action with the Redsys authorization code. The accounts team has a clean audit trail without asking anyone for a login password to the Redsys portal.
Spain Pays Through Redsys. Now Your Store Does Too.
inSite card collection. Full 3DS2. Saved cards. Subscription autopilot. Admin refunds without the portal. The complete Redsys TPV Virtual integration for Joomla ecommerce — built on the native Joomla 6 architecture and maintained like it matters. Because it does.
Translated In The Following Languages
Arabic Unitag (ar-AA), Chinese, Traditional (zh-TW), Danish (da-DK), Dutch (nl-NL), English (en-GB), English, USA (en-US), Finnish (fi-FI), French (fr-FR), German (de-DE), Greek (el-GR), Hebrew (he-IL), Italian (it-IT), Japanese (ja-JP), Norwegian Bokmål (nb-NO), Persian Farsi (fa-IR), Polish (pl-PL), Portuguese, Brazil (pt-BR), Portuguese, Portugal (pt-PT), Russian (ru-RU), Spanish (es-ES), Swedish (sv-SE), Turkish (tr-TR)
License Information
An active license entitles you to updates, downloads, and support for the duration of the license period. You may continue using this plugin indefinitely without an active license; however, support, updates, and downloads will not be available while your license is inactive.
- Developer J2Commerce
- Extension Type Payment
- J2Commerce Version 4.x, 6.x
- Joomla Version 4.x, 5.x, 6.x
Arabic Unitag
Chinese, Traditional
Danish
Dutch
English
English, USA
Finnish
French
German
Greek
Hebrew
Italian
Japanese
Norwegian Bokmål
Persian Farsi
Polish
Portuguese, Brazil
Portuguese, Portugal
Russian
Spanish
Swedish
TurkishFix Fix saved-card deletion to verify token ownership before deleting (closes an IDOR that let a user delete another customer's saved card via a guessed token id)
New Feature Add support for the unified My Profile Payment Methods tab (legacy per-gateway card list is skipped when the unified tab is active)
New Feature Dispatch BeforeDeleteSavedPaymentMethod veto before deleting a saved card so other plugins can block the deletion
New Feature declare subscription capability
Improvement multi-currency charge conversion
Update #Casing fixed for type attribute of fields
Fix use type="Geozone" so the field loads on Linux
Improvement Remove unused imports and normalize code style across plugin services
Update Now ships in 21 languages total (en-US, en-GB plus 19 locales)
Update Requires Joomla 6.x + J2Commerce 6.x + a Redsys/Servired TPV Virtual account
Fix Typos + plugin would not install
Update from Carlos Cámara - thank you!
Improvement from Carlos Cámara - thank you!
Fix Typos + plugin would not install
Update J2Commerce/J2Store v4 and Joomla 4/5 plugin support
You may also be interested in these products
Stay Updated
Subscribe for free and be the first to know about the latest features, updates, and new additions.