Swish Payments

Swish is a mobile payment solution launched in 2012 as a cooperation between six major Swedish banks, to enable real-time account-to-account payments. Since then Swish has grown rapidly, and now has 12 participating banks offering the service to the Swedish market - both for private use and to companies.

Enabling easy, secure and fast transactions between individuals and businesses, Swish is a natural element of everyday life for over 7,4 million Swedes and 215 000 companies. And since the introduction of Swish for eCommerce in 2017, it has in recent survey* been the top preferred payment method online among users aged 18-44.

This official extension allows Magento eCommerce to merge with Swish infrastructure and capabilities. With this integration Magento 2 merchants will be able to cater to the entire Swish user base, following the native Swish payment flow. To use it, merchants need to have an agreement with one of the participating Swedish banks that offer the agreement "Swish for Merchants". In addition to higher conversion and quicker and more reliable operation, the extension will give Magento stores the advantage of real time payments and refunds, Swish strong brand and SCA with Swedish Mobile BankID. 

Magento’s responsibility is to prompt the user to identify themselves by either a phone number or a QR code, and to pass this information along with key payment details via API to Swish, where all the transactions are processed. 

Account & Pricing

In order to use this extension you, as a merchant, need to be a Swish customer and obtain an agreement “Swish for Merchants” with one of the participating Swedish banks. You can see which banks offer this agreement here: https://www.swish.nu/get-started 

Each bank has their own customer offer, and the pricing is determined by the bank a merchant signs the agreement with. 

Features

• Seamless integration of any Magento 2 store into Swish ecosystem
• No changes to the customer experience for Swish users
• Default Swish payment methods apply:
  • In-app
  • In-browser
  • Via QR code 
• Easy, fast and secure operation
• Registers customers are identified by phone number, no card details are exchanged
• Full API integration 
• No redirects at any point during the transaction
• Compatibility: 
  • Magento Open Source (CE) 2.X
  • All modern web browsers.

Process Overview

To get started with Swish in your Magento 2 store you first need to get the agreement ‘Swish for merchants' from your bank, and negotiate the transaction fee depending on their offer. 

Once you sign the agreement you will have to name a Certificate Point of Contact (CPOC) to manage your certificates that provide access to the Swish API. After the agreement is settled, you can proceed with downloading the extension.

To connect your Swish-number to the Swish API you need to generate a certificate at portal.swish.nu. It is only the CPOC that is allowed to generate the certificate. Please see the Swish Certificate Guide before you start. Afterwards, follow the steps in the portal and then download your certificate. 

Finally, upload the certificate into Magento and fill out the necessary information. 

Security & PCI Compliance

Swish does not handle any data associated with card transactions. User data stored on Magento servers is limited to the default Magento fields: Name, Surname, Shipping / Billing Address, Phone Number, of which only the phone number is passed to Swish for processing.

This extension does not require collecting or processing any additional customer information. It is the responsibility of the dedicated Swish servers to both store customer accounts, and process transactions.

Communication between Magento and Swish servers takes place via API integration. On the customer’s end, no redirects to external pages take place at any point during the transaction.

*Kantar Sifo, for Getswish AB, H1 Survey 2020 (29 %)