How to Integrate M-Pesa into Your Shopify or WooCommerce Store

In Kenya, Lipa na M-Pesa accounts for over 85% of all digital retail payments. If your online store forces customers to write down a Paybill number, exit their mobile browser, open their SIM toolkit, enter account numbers manually, and text back a transaction code, you will experience massive checkout abandonment.

Automated M-Pesa STK Push solves this by instantly triggering a secure PIN pop-up on the buyer's smartphone screen the moment they click 'Complete Order'. Here is the complete implementation playbook.

To obtain production Daraja API credentials from Safaricom, you will need: a registered business Certificate of Incorporation (or Business Name registration), KRA PIN certificates for both the entity and directors, an active Safaricom Business Till or Paybill number, and a nominated administrator phone number.

WooCommerce offers native flexibility for M-Pesa. After registering on the Safaricom Developer Portal, create an App to obtain your Consumer Key and Consumer Secret. Install a reputable Daraja plugin, configure your Shortcode, Passkey, and Callback URLs, and test transactions in Sandbox before switching to Production.

Because Shopify operates a closed checkout system, direct Daraja API webhooks require either an approved payment orchestrator (such as Pesapal, DPO Group, or Peach Payments) or a custom hosted middleware proxy. This provides a compliant, seamless STK Push experience that returns the customer to Shopify's order confirmation page.

Occasionally, Safaricom network latencies can cause delayed callback responses. High-converting stores configure asynchronous transaction polling and automated order status sync to ensure orders are never marked 'Cancelled' while money has left the customer's wallet.