Enabling Captcha for nopCommerce

Enable Captcha to mitigate carding attacks on your nopCommerce website.  

Switch your nopCommerce configuration to use Qualpay’s Embedded Fields instead of the native nopCommerce fields. We recommend that you verify your Qualpay Account is configured correctly to use Embedded Fields before enabling Embedded Fields in your nopCommerce Settings.  

To verify that your Qualpay Account is configured correctly for using Embedded Fields with nopCommerce:

  1. Log into Qualpay Manager.
  2. Go to Administration, then click on Settings.
  3. Click on the Embedded tab, set the slider for Google V3 Recaptcha to Enabled.  

Note:  If you do not see the Embedded tab on your settings page, please contact Qualpay Customer Support. 

Next, make sure that your Qualpay security key is configured to allow access to Embedded Fields 

  1. Log into Qualpay Manager.
  2. Go to Administration, then click on API Security Keys.
  3. Make sure the slider for Embedded Fields API is set to Yes.

Last, configure your nopCommerce storefront to use Qualpay payments:

  1. Log into the nopCommerce Dashboard.
  2. Click on Configuration, then on Payment Methods. 
  3. Click the Edit button next to Qualpay. 
  4. Check the box next to “Use Embedded Fields.”


You can also use the Captcha included in your nopCommerce configuration to add the Captcha to your blog comments, contact us, and other non-payment pages of your website.  nopCommerce has provided a video that includes instructions.  

In addition to enabling Captcha, we recommend that you use Qualpay’s Fraud settings to stop duplicate transactions. Here you can set a ceiling and floor for your transactions and Qualpay’s AVS and CVV settings to reject mismatched transactions.