What Is iyzico?
iyzico is one of Türkiye's leading payment infrastructure providers, processing payments for businesses ranging from small e-commerce shops to large enterprises and marketplaces. Acquired by PayU in 2019, iyzico combines a modern developer-friendly platform with deep integration into Turkish banking networks. Its hosted Checkout Form (CKO) gives merchants a single embedded payment experience that supports cards, installments, and bank-redirect flows.
Key Features
- Hosted Checkout Form (CKO): A single embedded payment form rendered on your page that supports credit and debit cards, installments, and bank transfers — fully PCI-scope-reduced because card data is captured directly by iyzico.
- Installments: Turkish banks expect installment options at checkout. iyzico automatically detects the card BIN and presents the available installment plans negotiated with each issuing bank.
- Multi-Currency Processing: Handle transactions in Turkish Lira (TRY) as well as USD, EUR, GBP, NOK, and CHF, making it ideal for stores with international customers.
- Fraud Screening: Every transaction passes through iyzico's risk engine and is returned with a fraud status: approved, under review, or rejected — so merchants can decide whether to ship immediately or hold for manual review.
- 3D Secure: 3D Secure authentication is fully supported and configurable per payment method.
- Sandbox-First Development: iyzico's sandbox environment uses the same API as production, making it easy to test the full payment flow with their published test cards before going live.
Supported Regions and Currencies
iyzico is focused on the Turkish market but supports multiple currencies for merchants serving international customers. The platform processes payments in Turkish Lira (TRY), US Dollar (USD), Euro (EUR), British Pound (GBP), Norwegian Krone (NOK), and Swiss Franc (CHF). This currency coverage makes iyzico a popular choice for cross-border e-commerce stores based in Türkiye.
Integration with Trinavo
Trinavo integrates with iyzico through their official Checkout Form API. After entering your iyzico API key and secret key in the Trinavo dashboard, the gateway becomes available at checkout. iyzico's checkout form is rendered inline on your payment page, so customers never leave your site to complete a purchase.
The integration handles iyzico's IYZWSv2 HMAC-SHA256 authentication, payment session initialization, and post-payment status retrieval automatically. After the customer completes payment, Trinavo calls iyzico's retrieve endpoint with the session token to confirm the final payment status, fraud screening result, and transaction ID. Merchants can switch between sandbox and production environments with a single setting.
Security and Compliance
iyzico is PCI DSS Level 1 certified, ensuring that all cardholder data is processed according to the highest industry security standards. Every API request is signed with HMAC-SHA256 to prevent tampering, and 3D Secure authentication adds an additional verification layer for card transactions. The built-in fraud-screening engine evaluates each transaction in real time and flags suspicious activity before funds are captured.
Getting Started
To enable iyzico in your Trinavo store, navigate to Payment Methods in your dashboard, add a new iyzico payment method, and enter your API key and secret key from the iyzico merchant panel. Choose your default currency (TRY for Turkish merchants), enable test mode for development, and uncheck it when you're ready to go live. Your customers can then pay with cards and Turkish bank installments directly on your storefront.
