# Whop and WooCommerce payments glossary > 198 payment, WooCommerce and Whop terms explained in plain English by WhopForWoo, a WordPress plugin by Bakipy LLC that adds Whop as a WooCommerce payment gateway. Canonical: https://whopforwoo.com/glossary ### 3-D Secure 3-D Secure is a protocol that lets the card issuer authenticate the cardholder during an online payment, usually through a banking app or one-time code. A successful check generally shifts fraud chargeback liability to the issuer. ### Account ID The Account ID is the public identifier of a Whop business, starting with biz_. WhopForWoo needs it alongside the API key; older Whop screens and tutorials call it Company ID. More: https://whopforwoo.com/docs/whop-api-key ### ACH ACH is the US network for bank-to-bank transfers and debits. Whop offers ACH bank transfer to US customers; it is cheaper than cards but takes longer to confirm. More: https://whopforwoo.com/whop-payment-methods ### Acquirer An acquirer is the bank or licensed institution that processes card payments on behalf of a merchant and deposits the funds. It sends each transaction to the card network and carries the risk if the merchant cannot cover chargebacks. ### Action Scheduler Action Scheduler is the background job queue bundled with WooCommerce. It runs delayed or recurring tasks, such as webhooks and subscription renewals, and lists them under Tools, Scheduled Actions. ### Afterpay Afterpay is a buy now, pay later provider that splits a purchase into installments for the customer while the merchant is paid in full. Whop offers it through its financing program, alongside Klarna, Sezzle, Splitit and Zip. More: https://whopforwoo.com/whop-payment-methods ### Agency An agency is a business that builds and maintains sites for clients, often installing the same plugins on many stores. Plugin licences with unlimited sites, like WhopForWoo's Pirate plan, suit this case. More: https://whopforwoo.com/pricing ### Annual license An annual license gives access to updates and support for one year and is renewed each year. WhopForWoo does not sell annual licences: its licences are a one-time payment, with updates included, and never expire. More: https://whopforwoo.com/pricing ### API key An API key is a secret string that authenticates a server's requests to an API. Whop API keys are created on the dashboard's Developer page and sent as a Bearer token; they must never reach the browser. More: https://whopforwoo.com/docs/whop-api-key ### API rate limit A rate limit caps how many API requests a client can send in a period. Whop's API allows 600 requests per minute per operation and credential, then returns 429 with rate_limit_exceeded. More: https://whopforwoo.com/whop-payment-limits ### Api-Version-Date header The Api-Version-Date header pins the response format of the Whop API to a given date, so later API changes do not break an integration. WhopForWoo sends it with its requests. More: https://whopforwoo.com/docs/whop-api ### Apple Pay Apple Pay is Apple's digital wallet, used with Face ID or Touch ID on Apple devices and Safari. On WooCommerce with WhopForWoo it appears in the Whop form once the store's domain is verified for Apple Pay. More: https://whopforwoo.com/apple-pay-woocommerce ### Apple Pay domain verification Apple Pay domain verification proves you control the domain where the payment form runs. For Whop, you host Whop's file at /.well-known/apple-developer-merchantid-domain-association and register the domain in your Whop dashboard. More: https://whopforwoo.com/apple-pay-woocommerce ### Authorization An authorization is the issuer's approval of a card payment for a given amount. It confirms the card is valid and has funds, and places a hold; the money only moves once the payment is captured. ### Authorization rate An authorization rate is the share of payment attempts the issuer approves. Local payment methods, correct currency and 3-D Secure handling raise it; it directly limits how many checkouts turn into revenue. ### Average order value (AOV) Average order value is total revenue divided by the number of orders over a period. It guides pricing, shipping thresholds and upsells, and on Whop it matters for the $2,500 checkout limit on new accounts. ### AVS AVS, the Address Verification Service, compares the billing address entered at checkout with the address the issuer has on file. It is mainly used in the US, Canada and the UK as one fraud signal. ### Bancontact Bancontact is Belgium's main debit card scheme and online payment method, confirmed in the customer's banking app. Whop shows it to eligible customers in Europe. More: https://whopforwoo.com/whop-payment-methods ### Bank transfer A bank transfer is a payment sent directly from the customer's bank account to the merchant, without a card. It has low fees and no card chargebacks, but confirmation can take hours or days. ### BIN A BIN, or Bank Identification Number, is the first six to eight digits of a card number. It identifies the issuing bank, the card brand, the card type and the issuing country, which fraud checks often use. ### Buy now, pay later (BNPL) Buy now, pay later lets a customer split a purchase into installments while the merchant is paid upfront, minus a fee. On Whop, it is offered through a financing program that merchants must apply for. More: https://whopforwoo.com/whop-payment-methods ### Cancelled Cancelled is the WooCommerce status of an order stopped by the merchant or the customer, or an unpaid order that timed out under the hold stock setting. Any reduced stock is restored. ### Capture A capture is the step that turns an authorized card payment into an actual charge, moving the held funds toward the merchant. Most online stores capture immediately; some capture later, when the order ships. ### Card network A card network, such as Visa or Mastercard, is the system that routes transactions between acquirers and issuers. It sets the interchange rates, the scheme fees and the chargeback rules that every merchant must follow. ### Card testing Card testing is an attack in which fraudsters run many small payments on a checkout to find which stolen card numbers still work. It causes declines, fees and dispute risk for the store. ### Card-not-present (CNP) A card-not-present transaction is a payment where the card is not physically shown, as in every online order. It carries more fraud risk than an in-store payment, so it costs more and relies on checks like CVV and 3-D Secure. ### Cart abandonment Cart abandonment is when a shopper adds items to the cart but leaves without paying. Common causes are surprise costs, forced account creation, a long form and missing payment methods. ### CDN A CDN, or content delivery network, serves a site's files from servers close to each visitor to cut load time. Some CDNs also cache pages and must be told to skip the checkout and webhook URLs. ### Chargeback A chargeback is a forced reversal of a card payment that the cardholder requests through their bank. The merchant loses the funds, usually pays a dispute fee, and can contest it with evidence. More: https://whopforwoo.com/whop-payment-issues ### Chargeback ratio A chargeback ratio is the share of a merchant's transactions that turn into chargebacks over a period. Card networks and providers watch it closely; rates around 1% or more can trigger monitoring programs, reserves or account closure. ### Checkout Checkout is the page where the customer enters billing and shipping details, picks a payment method and places the order. Most lost sales happen here, so every extra field or redirect counts. More: https://whopforwoo.com/whop-checkout ### Checkout Block The Checkout Block is WooCommerce's block-based checkout, built with the WordPress block editor and powered by the Store API. It is the default for new stores; WhopForWoo uses Whop's hosted page with it. More: https://whopforwoo.com/whop-wordpress-plugin ### Checkout configuration A checkout configuration is a Whop API object that defines what a checkout charges, with a plan or an inline amount, plus metadata. WhopForWoo creates one per WooCommerce order with the exact cart total and order reference. More: https://whopforwoo.com/docs/whop-api ### Checkout element The Checkout element is the Whop Element that embeds Whop's full checkout in a page: it prices the order, shows the eligible methods and completes the payment. WhopForWoo mounts it in the WooCommerce payment box. More: https://whopforwoo.com/whop-elements ### Checkout friction Checkout friction is anything that slows or stops a buyer from paying: extra fields, forced sign-up, slow pages, redirects, surprise fees or a missing payment method. Each one lowers the conversion rate. More: https://whopforwoo.com/whop-embedded-checkout ### Churn Churn is the share of customers or subscribers who stop buying or cancel over a period. Failed renewal payments, called involuntary churn, are a large part of it for subscription businesses. ### Classic checkout The classic checkout is WooCommerce's original checkout, rendered by the [woocommerce_checkout] shortcode. It is where WhopForWoo embeds the Whop Elements form directly inside the payment box. More: https://whopforwoo.com/whop-embedded-checkout ### Company ID Company ID is the former name of the Whop Account ID, the biz_ identifier of a Whop business. Both names refer to the same value, which WhopForWoo asks for in its settings. More: https://whopforwoo.com/docs/whop-api-key ### Completed Completed is the WooCommerce status of an order that has been paid and fulfilled. Orders containing only virtual and downloadable products move straight to completed once the payment is confirmed. ### Confirmation token A confirmation token is the single-use token, prefixed ctok_, that Whop's payment elements return after collecting payment details. The merchant's server sends it to the Payments API to create the charge. More: https://whopforwoo.com/whop-elements ### Constant-time comparison A constant-time comparison checks two strings in the same time whether they match early or late. It stops attackers from guessing a signature byte by byte by measuring response times. ### Content Security Policy (CSP) A Content Security Policy is an HTTP header that lists which domains a page may load scripts, frames and styles from. A strict CSP must allow the payment provider's domains, such as cdn.whop.com, or the form will not load. ### Conversion rate A conversion rate is the share of visitors or checkout sessions that end in a paid order. At checkout, payment method choice, page speed and redirects have a direct effect on it. ### Coupon A coupon is a WooCommerce discount code that reduces the cart or product price, by a fixed amount or a percentage. The gateway charges the discounted total, so WhopForWoo needs no coupon setup in Whop. ### Cross-site request forgery (CSRF) Cross-site request forgery tricks a logged-in user's browser into sending an action they did not intend, such as changing settings. WordPress defends against it with nonces on forms and AJAX requests. ### Crypto payment A crypto payment is a purchase paid in a cryptocurrency. Whop converts crypto to USD at checkout, charges 1.5%, supports it for one-time payments only, and crypto payments cannot be charged back. More: https://whopforwoo.com/whop-payment-methods ### Currency conversion fee A currency conversion fee is the charge applied when the payment currency differs from the currency the merchant is paid in. Whop lists 1% for conversion, or 2% for Argentina. More: https://whopforwoo.com/whop-fees ### Custom checkout A custom checkout is a checkout page whose layout, fields and branding are controlled by the merchant rather than the payment provider, with the provider's payment fields placed inside it. More: https://whopforwoo.com/whop-custom-checkout ### CVV A CVV is the three- or four-digit security code printed on a card. Merchants may never store it, and asking for it proves the buyer had the physical card details at the time of payment. ### Debug log The debug log is the file, wp-content/debug.log, where WordPress writes PHP errors and warnings when WP_DEBUG and WP_DEBUG_LOG are enabled in wp-config.php. It is the first place to look when a plugin breaks checkout. ### Decline A decline is a refusal of a payment by the issuer, the provider's fraud checks or the payment method itself. The customer sees an error and the WooCommerce order stays unpaid until another attempt succeeds. More: https://whopforwoo.com/whop-payment-issues ### Decline code A decline code is the short reason returned with a refused payment, such as insufficient funds or card velocity exceeded. It tells the merchant whether the customer should retry, use another card or call their bank. More: https://whopforwoo.com/whop-payment-issues ### Deduplication Deduplication is ignoring a message that has already been processed. Whop delivers webhooks at least once, so WhopForWoo records each webhook-id and skips repeats. More: https://whopforwoo.com/docs/whop-webhooks ### Digital products Digital products are goods delivered online with no shipping, such as ebooks, templates, courses, software or presets. In WooCommerce they are set up as virtual and often downloadable products. More: https://whopforwoo.com/whop-for-digital-products ### Digital wallet A digital wallet stores a customer's cards on their phone or browser so they can pay without typing card details. Apple Pay and Google Pay are the most common and are charged at the card rate on Whop. More: https://whopforwoo.com/apple-pay-woocommerce ### Dispute A dispute is a formal challenge of a payment raised by the customer with their bank or payment provider. On Whop, each card dispute costs $15, and a high dispute rate can lead to a reserve. More: https://whopforwoo.com/whop-fees ### Downloadable product A downloadable product is a WooCommerce product that gives the customer a file to download after payment, with optional download limits and expiry. WooCommerce only grants access once the order is paid. More: https://whopforwoo.com/whop-for-digital-products ### Dropshipping Dropshipping is a retail model where the store sells products a supplier ships directly to the customer, so the merchant holds no stock. Long delivery times raise dispute risk, which payment providers watch closely. More: https://whopforwoo.com/whop-for-dropshipping ### Embedded checkout An embedded checkout keeps the payment form inside the store's own checkout page, usually in an iframe, so the customer never leaves the site. WhopForWoo embeds Whop Elements on the classic checkout and the order-pay page. More: https://whopforwoo.com/whop-embedded-checkout ### Express checkout Express checkout lets a customer pay in one or two taps with a saved wallet such as Apple Pay or Google Pay, often skipping the address form because the wallet supplies it. ### Failed Failed is the WooCommerce status of an order whose payment was declined or did not complete. The customer can usually try again, and the order is not counted as a sale. More: https://whopforwoo.com/whop-payment-issues ### Flat-rate pricing Flat-rate pricing is a fee model where every card payment costs the same percentage plus a fixed amount, whatever the card type. Most payment service providers, Whop included, use it for small and mid-sized merchants. More: https://whopforwoo.com/whop-fees ### Fraud screening Fraud screening is the automated review of a payment for signs of fraud before or after approval, using signals such as card BIN, IP address, device, velocity and address checks. Suspicious payments are blocked or flagged. ### Free trial A free trial gives a customer access to a subscription product for a limited time before the first charge. Whop plans can include one; clear reminders before billing reduce disputes. More: https://whopforwoo.com/whop-subscriptions-woocommerce ### Friendly fraud Friendly fraud is a chargeback filed by the real cardholder for a purchase they made, often because they forgot it, did not recognise the descriptor or wanted to skip the refund process. ### Fulfillment Fulfillment is everything that happens after payment to deliver an order: picking, packing, shipping and tracking for physical goods, or granting access for digital ones. ### Gateway ID A gateway ID is the unique identifier WooCommerce stores on each order to record which payment method was used. WhopForWoo's gateway ID is whop, and its settings live under WooCommerce, Settings, Payments. ### Google Pay Google Pay is Google's digital wallet, available in Chrome and on Android. Whop charges it at the card rate, and on an embedded form it becomes available once the domain is set up for Apple Pay. More: https://whopforwoo.com/whop-payment-methods ### Guest checkout Guest checkout lets a customer buy without creating an account. WooCommerce supports it in its account settings; forcing account creation is a common reason buyers abandon the cart. ### High-risk merchant A high-risk merchant is a business that providers expect to generate more fraud or chargebacks, because of its category, its refund model or its history. It faces higher fees, reserves or outright refusal. More: https://whopforwoo.com/stripe-account-closed ### HMAC HMAC, hash-based message authentication code, combines a secret key and a message into a signature using a hash function such as SHA-256. Only someone with the key can produce a valid signature. More: https://whopforwoo.com/docs/whop-webhooks ### Hold stock Hold stock is a WooCommerce inventory setting, in minutes, that reserves stock for unpaid orders. When the time runs out, pending payment orders are cancelled and the stock is released. ### Hook A hook is a named point in WordPress code where plugins can run their own functions. There are two kinds: actions, which do something, and filters, which change a value before it is used. ### Hosted checkout A hosted checkout is a payment page run by the provider on its own domain. The store redirects the customer there and back. WhopForWoo uses Whop's hosted page for the WooCommerce Checkout Block. More: https://whopforwoo.com/whop-checkout-link-vs-embedded ### HPOS HPOS, High-Performance Order Storage, stores WooCommerce orders in dedicated database tables instead of the WordPress posts table. It is the default for new stores since WooCommerce 8.2; WhopForWoo is HPOS compatible. More: https://whopforwoo.com/whop-wordpress-plugin ### HTTPS HTTPS is HTTP encrypted with TLS. Whop rejects webhook URLs that are not public https, and browsers block wallets like Apple Pay on pages served without it. More: https://whopforwoo.com/docs/whop-webhooks ### iDEAL iDEAL is the most used online payment method in the Netherlands, where the customer confirms the payment in their bank app. Whop lists iDEAL among its European methods, up to €1M per payment. More: https://whopforwoo.com/whop-payment-methods ### Idempotency Idempotency means that running the same operation several times has the same result as running it once. For payments, it guarantees a retried request or a repeated webhook never charges or completes an order twice. More: https://whopforwoo.com/is-whop-checkout-safe ### Idempotency key An idempotency key is a unique value sent with an API request so the server can recognise a retry and return the original result instead of acting again. WhopForWoo sends one with its Whop creation calls. More: https://whopforwoo.com/docs/whop-api ### Iframe An iframe is a frame that loads a page from another domain inside the current page. Browsers isolate it, so card details typed into a provider's iframe cannot be read by the store's scripts. More: https://whopforwoo.com/is-whop-checkout-safe ### Interchange fee An interchange fee is the amount the acquirer pays the issuer on each card transaction. Card networks set it by card type and region; in the EU consumer cards are capped at 0.2% for debit and 0.3% for credit. ### International card fee An international card fee is a surcharge applied when the card was issued in a different country from the merchant. Whop adds 1.5% for international cards on payments processed in the US. More: https://whopforwoo.com/whop-fees ### Issuer An issuer is the bank that gave the customer their card. It approves or declines each authorization, runs 3-D Secure checks, and decides the first round of any chargeback the cardholder opens. ### Klarna Klarna is a buy now, pay later provider that lets customers pay in installments. On Whop it is part of the financing program, with per-country limits such as $10,000 per transaction in the US. More: https://whopforwoo.com/whop-payment-methods ### KYB KYB, Know Your Business, is the verification of a company rather than a person: its registration, ownership and activity. Providers run it alongside KYC when a business, not an individual, receives the payouts. More: https://whopforwoo.com/whop-kyc-verification ### KYC KYC, Know Your Customer, is the identity check a payment provider runs on a merchant before paying them out. On Whop it means entering your details, linking a bank account and uploading an ID with a selfie. More: https://whopforwoo.com/whop-kyc-verification ### Least privilege Least privilege means giving a key or user only the permissions they need. Whop recommends replacing an Admin-role API key with a custom permission set covering only the endpoints you call. More: https://whopforwoo.com/docs/whop-api-key ### License key A license key on Whop is the unique key each customer gets when buying a product that includes the Software app. Servers validate it with GET /memberships/{id}, which accepts the key in place of a membership ID. More: https://whopforwoo.com/docs/whop-license-keys ### Local payment method A local payment method is a payment option popular in one country or region, like iDEAL in the Netherlands or Bancontact in Belgium. Whop shows eligible local methods automatically based on the customer's location and currency. More: https://whopforwoo.com/whop-payment-methods ### Membership A membership on Whop is a customer's access to a product, created when they buy a plan. Its status, such as active, trialing or completed, tells your app whether to grant access. More: https://whopforwoo.com/whop-subscriptions-woocommerce ### Membership webhooks Membership webhooks are Whop events such as membership.activated and membership.updated, sent when a customer's access starts or changes. Sites selling Whop subscriptions use them to grant or remove access. More: https://whopforwoo.com/whop-subscriptions-woocommerce ### Merchant account A merchant account is a bank account opened with an acquirer that lets a business accept card payments under its own merchant ID. With a payment service provider, merchants share the provider's account instead. More: https://whopforwoo.com/whop-merchant-account ### Merchant Category Code (MCC) A Merchant Category Code is a four-digit number that classifies what a business sells. Card networks use it for interchange rates, rewards and risk rules, and some categories are treated as high risk. ### Merchant discount rate (MDR) The merchant discount rate is the total percentage a merchant pays to accept a card payment, covering interchange, scheme fees and the provider's margin. On Whop, the standard domestic card rate is 2.7% plus $0.30. More: https://whopforwoo.com/whop-fees ### Merchant of record A merchant of record is the legal seller named on the customer's payment, responsible for processing, refunds and chargebacks, and sometimes tax. Whop states it acts as merchant of record on Whop Payments. More: https://whopforwoo.com/whop-payment-processor ### Metadata Metadata is a set of custom key-value pairs attached to an API object, such as a Whop checkout configuration or membership. WhopForWoo stores the WooCommerce order reference there to match payments to orders. More: https://whopforwoo.com/docs/whop-api ### Mobile checkout Mobile checkout is the checkout as experienced on a phone, where typing is slow and redirects feel longer. Digital wallets and a short form matter most here, since most store traffic is now mobile. ### Multi-currency Multi-currency means accepting payments in more than one currency. WhopForWoo passes the WooCommerce order currency to Whop, which supports 47 currencies natively, so the customer pays the exact amount shown in the store. More: https://whopforwoo.com/whop-payment-methods ### Must-use plugin (mu-plugin) A must-use plugin is a PHP file placed in wp-content/mu-plugins that WordPress loads automatically on every request. It cannot be deactivated from the admin, so it suits site-wide fixes and hosting rules. ### Nonce A nonce in WordPress is a token tied to a user, an action and a time window, added to forms and AJAX calls to block cross-site request forgery. Unlike a true nonce, it can be reused for up to 24 hours. ### On hold On hold is the WooCommerce status of an order awaiting payment confirmation, typically for bank transfers or manual review. Stock is reduced, but the merchant should not ship until the payment is confirmed. ### One-time payment A one-time payment is a single charge with no renewal. WhopForWoo charges each WooCommerce order once; its own licences are sold as a one-time payment, updates included. More: https://whopforwoo.com/pricing ### Online course An online course is paid educational content delivered through videos, lessons or a community, usually sold as one-time access or a subscription. WooCommerce stores often pair a payment gateway with a learning plugin. More: https://whopforwoo.com/whop-for-courses ### Online store An online store is a website where customers browse products, add them to a cart and pay. On WordPress, WooCommerce provides the store and a payment gateway plugin connects it to a processor. More: https://whopforwoo.com/whop-online-store ### Options table The options table, wp_options, is where WordPress and plugins store settings as named values. A gateway's settings, such as its API key and webhook secret, are saved there and stay on the server. ### Order key An order key is a random string, starting with wc_order_, attached to every WooCommerce order. It appears in thank-you and order-pay URLs so a guest can only view or pay for their own order. ### Order meta Order meta is extra data stored with a WooCommerce order as key-value pairs, such as a payment ID or checkout reference. With HPOS it lives in a dedicated order meta table. ### Order notes Order notes are timestamped messages on a WooCommerce order, either private for the merchant or sent to the customer. Payment gateways use them to log payment IDs, confirmations and refunds. ### Order status An order status tells WooCommerce and the merchant where an order stands, from pending payment to completed, refunded or failed. Payment gateways set it based on the payment result. ### Order-pay page The order-pay page is the WooCommerce page where a customer pays for an existing unpaid order, for example from a payment link sent by the store. WhopForWoo shows the embedded Whop form there too. More: https://whopforwoo.com/whop-embedded-checkout ### Page cache A page cache stores the full HTML of a page and serves it to the next visitors without running PHP. Cart, checkout and account pages must be excluded, or customers see stale carts and expired nonces. ### Partial refund A partial refund returns only part of a payment, for example one item of a multi-item order or a shipping fee. In WooCommerce the order keeps its status and the refunded amount is recorded on it. ### Pay button The pay button is the button that submits the payment. With WhopForWoo on the classic checkout, the Whop form's own pay button is the only button shown while Whop is the selected method. More: https://whopforwoo.com/whop-embedded-checkout ### Payment element A payment element is a Whop Element that only collects a payment method inside a form the merchant designs. It returns a single-use confirmation token that the merchant's server charges through Whop's Payments API. More: https://whopforwoo.com/whop-elements ### Payment gateway A payment gateway is the software link that sends payment details from a checkout to the processor and returns the result. In WooCommerce, the word also means the plugin that adds a payment method to checkout. More: https://whopforwoo.com/whop-payment-gateway ### Payment link A payment link is a URL that opens a hosted payment page for a fixed product or amount. It needs no website integration, but the store does not get an order record unless something connects the two. More: https://whopforwoo.com/whop-checkout-link-vs-embedded ### Payment method A payment method is a way a customer can pay, such as a card, a digital wallet, a bank transfer, buy now pay later or crypto. Offering the methods customers expect in their country raises conversion. More: https://whopforwoo.com/whop-payment-methods ### Payment processor A payment processor is the company that moves a payment between the customer's bank and the merchant's account, handling authorization, capture and settlement. Whop can be used as a payment processor for products sold elsewhere. More: https://whopforwoo.com/whop-payment-processor ### Payment processor shutdown A payment processor shutdown is the closure or freeze of a merchant's account by its provider, often with funds held for months. Keeping a second payment provider ready limits the damage to sales. More: https://whopforwoo.com/stripe-account-closed ### Payment service provider (PSP) A payment service provider is a company that lets merchants accept many payment methods through one account and one contract, without opening their own merchant account at an acquiring bank. More: https://whopforwoo.com/whop-payment-processor ### payment.succeeded event payment.succeeded is the Whop webhook event sent when a payment completes. It is the event to subscribe to for WooCommerce; WhopForWoo checks the payment before marking the order paid. More: https://whopforwoo.com/docs/whop-webhooks ### Payout A payout is the transfer of a merchant's available balance from the payment provider to their bank account or another payout method. Whop pays out to a bank account, PayPal or a crypto wallet depending on the country. More: https://whopforwoo.com/whop-merchant-account ### Payout methods Payout methods are the destinations Whop can send a merchant's balance to: a bank account, PayPal or a crypto wallet, depending on the country. Whop pays out in over 200 countries. More: https://whopforwoo.com/whop-merchant-account ### Payout schedule A payout schedule sets how often a merchant's available balance is withdrawn. On Whop it can be instant, daily or weekly depending on the account, and instant withdrawals are subject to a daily limit. More: https://whopforwoo.com/whop-merchant-account ### PayPal PayPal is an online wallet where customers pay with their PayPal balance, bank or card. Whop accepts PayPal as a payment method and also offers PayPal as a payout method in some countries. More: https://whopforwoo.com/whop-payment-methods ### PCI DSS PCI DSS is the card industry's security standard for anyone who stores, processes or transmits card data. When card fields load in the provider's iframe, card numbers never reach the store's server, which keeps the merchant's scope small. More: https://whopforwoo.com/is-whop-checkout-safe ### Pending payment Pending payment is the WooCommerce status of an order that has been created but not paid. WhopForWoo creates the order in this status before the payment, and unpaid orders can be cancelled by the hold stock setting. ### PHP version The PHP version is the version of the programming language WordPress runs on, set by the host. WhopForWoo requires PHP 7.4 or later, WordPress 6.0 or later and WooCommerce 7.0 or later. More: https://whopforwoo.com/whop-wordpress-plugin ### Physical products Physical products are goods that must be packed and shipped to the customer. Their orders stay in processing until fulfilled, and delivery proof is the main defence against chargebacks. More: https://whopforwoo.com/whop-for-physical-products ### Plan A plan is a pricing option attached to a Whop product: free, one-time or recurring, with its price, billing period and options such as a free trial. Whop's Checkout element can be mounted with a plan. More: https://whopforwoo.com/whop-subscriptions-woocommerce ### Plugin update A plugin update installs a newer version of a plugin from the WordPress admin. WhopForWoo updates require an active licence, like the Whop checkout itself. More: https://whopforwoo.com/pricing ### Processing Processing is the WooCommerce status of a paid order that still needs fulfilment, such as shipping a physical product. Stock has been reduced and the customer has received an order confirmation email. ### Prohibited business A prohibited business is a category a payment provider refuses to process at all. Whop lists among others adult content, vapes and tobacco, CBD and cannabis, weapons, illegal gambling and unauthorized IPTV. More: https://whopforwoo.com/whop-kyc-verification ### PSD2 PSD2 is the second EU Payment Services Directive. For online stores, its main effect is the Strong Customer Authentication requirement on most card payments made by customers in the European Economic Area. ### Race condition A race condition happens when two processes act on the same data at once and the result depends on timing. A webhook and the customer's return can arrive together; WhopForWoo locks each order to avoid completing it twice. More: https://whopforwoo.com/docs/whop-webhooks ### Raw request body The raw request body is the exact bytes of an incoming request before any parsing. Webhook signatures must be checked against it, because decoding and re-encoding the JSON changes the bytes and breaks the check. More: https://whopforwoo.com/docs/whop-webhooks ### Recurring payment A recurring payment is a charge repeated on a schedule, such as monthly or yearly, using a payment method the customer saved and authorised once. Subscriptions rely on it. More: https://whopforwoo.com/whop-subscriptions-woocommerce ### Redirect A redirect sends the customer from the store to another site, such as a hosted payment page or a bank, then back. Each redirect adds load time and a chance to drop off. More: https://whopforwoo.com/whop-embedded-checkout ### Refund A refund returns all or part of a captured payment to the customer, at the merchant's initiative. It avoids a chargeback, but most providers keep the original processing fee. ### Refund policy A refund policy states when and how customers can get their money back. A clear, visible policy reduces chargebacks, because customers ask the store first instead of their bank. ### Refunded Refunded is the WooCommerce status of an order whose full amount has been returned to the customer. A partial refund keeps the previous status and records the refunded amount on the order. ### Replay attack A replay attack resends a valid, captured request to repeat its effect, such as marking an order paid twice. Whop asks receivers to reject webhooks whose timestamp is more than 5 minutes off. More: https://whopforwoo.com/docs/whop-webhooks ### Representment Representment is the merchant's answer to a chargeback, sent with evidence such as tracking, delivery confirmation, logs or terms accepted at checkout. If the issuer accepts it, the funds are returned to the merchant. ### Request for information (RFI) A request for information is a follow-up from Whop's compliance team asking a seller for a document, a tax ID or a business detail after the initial verification. The review continues once every item is answered. More: https://whopforwoo.com/whop-kyc-verification ### Reserve A reserve is part of a merchant's balance held back by the payment provider to cover future refunds and chargebacks. The money still belongs to the merchant and is released on a set date. More: https://whopforwoo.com/whop-merchant-account ### Resolution Center The Resolution Center is Whop's system where customers file refund claims before going to their bank. Many unresolved cases there can lead Whop to place or increase a reserve. More: https://whopforwoo.com/whop-merchant-account ### REST API A REST API exposes data and actions over HTTP using URLs and methods such as GET and POST, usually exchanging JSON. WordPress, WooCommerce and Whop each provide one. More: https://whopforwoo.com/docs/whop-api ### Return URL A return URL is the page the customer comes back to after an off-site step such as 3-D Secure or a bank redirect. It shows a result, but the payment must still be confirmed server side because the URL can be faked. More: https://whopforwoo.com/whop-embedded-checkout ### Rolling reserve A rolling reserve holds a percentage of each sale for a fixed number of days, for example 10% for 90 days, then releases it. Whop may apply one to new accounts or accounts with rising disputes. More: https://whopforwoo.com/whop-merchant-account ### SaaS SaaS, software as a service, is software sold as an online subscription instead of a one-off download. Billing usually relies on recurring payments and license or account checks. More: https://whopforwoo.com/whop-for-saas ### Sales tax and VAT Sales tax and VAT are consumption taxes added to the sale price and paid to the authorities of the customer's location. With Whop, merchants choose whether Whop collects and remits, collects only, or they handle tax themselves. More: https://whopforwoo.com/whop-payment-processor ### SEPA SEPA, the Single Euro Payments Area, is the system that makes euro bank transfers and direct debits work the same way across the euro area and neighbouring European countries. Whop supports SEPA Direct Debit and EU bank transfers. More: https://whopforwoo.com/whop-payment-methods ### SEPA Direct Debit SEPA Direct Debit lets a merchant collect euros from a customer's bank account using an IBAN and a mandate. On Whop it is limited to €11,500 per payment and is not available in sandbox. More: https://whopforwoo.com/whop-payment-limits ### Server-side verification Server-side verification means the store's server confirms a payment directly with the provider instead of trusting the browser. WhopForWoo checks the order, site, checkout configuration, amount and currency before marking an order paid. More: https://whopforwoo.com/is-whop-checkout-safe ### Settlement Settlement is the process by which funds from captured payments move from the issuer, through the network and acquirer, into the merchant's provider balance. It usually takes one to several business days. ### Settlement currency A settlement currency is the currency in which a merchant receives their funds, which can differ from the currency the customer paid in. When they differ, a currency conversion fee usually applies. ### Software app The Software app is the Whop app that generates a unique license key for each purchase of a product. WhopForWoo licences are themselves Whop license keys issued this way. More: https://whopforwoo.com/docs/whop-license-keys ### Staging site A staging site is a private copy of a live store used to test updates, themes and payment settings before they reach customers. Payment tests there should use sandbox keys, never live ones. More: https://whopforwoo.com/docs/whop-sandbox ### Standard Webhooks Standard Webhooks is an open specification for signing webhooks with webhook-id, webhook-timestamp and webhook-signature headers. Whop follows it, so its signatures can be checked with any compliant library. More: https://whopforwoo.com/docs/whop-webhooks ### Statement descriptor A statement descriptor is the merchant name that appears on the customer's bank or card statement. A descriptor the customer does not recognise is a common cause of friendly fraud chargebacks. ### Store API The Store API is WooCommerce's public REST API for the cart and checkout, used by the Cart and Checkout Blocks. It needs no API keys because it only acts on the visitor's own cart and session. ### Strong Customer Authentication (SCA) Strong Customer Authentication is the European rule that online payments must be confirmed with two of three factors: something the customer knows, owns or is. Card payments meet it through 3-D Secure. ### Subscription A subscription is a product billed on a repeating schedule, such as monthly or yearly, until the customer cancels. WhopForWoo charges one-time WooCommerce orders; recurring billing can run on Whop itself. More: https://whopforwoo.com/whop-subscriptions-woocommerce ### Swish, MobilePay and Vipps Swish, MobilePay and Vipps are Nordic mobile payment apps used in Sweden, Denmark, Finland and Norway. Whop supports them for one-time payments only, with Swish and Vipps limited to kr 50,000. More: https://whopforwoo.com/whop-payment-limits ### Test card A test card is a fake card number that only works in a sandbox, used to simulate approved or declined payments. In the Whop sandbox, 4242 4242 4242 4242 simulates a successful payment. More: https://whopforwoo.com/docs/whop-sandbox ### Thank-you page The thank-you page, or order received page, is the WooCommerce page shown after checkout with the order summary. Its URL carries the order key, so guests can view their own order without logging in. ### TLS TLS, Transport Layer Security, encrypts traffic between the browser or another server and your site; it is what puts the s in https. Payment pages and webhook URLs must use it with a valid certificate. ### Tokenization Tokenization replaces a card number with a random token that is useless if stolen. The store or provider uses the token to reference the card, so raw card data stays inside the provider's systems. ### Transaction fee A transaction fee is what a provider charges for each successful payment, usually a percentage of the amount plus a fixed sum. Extra charges can apply for international cards, currency conversion, disputes or financing. More: https://whopforwoo.com/whop-fees ### Transient A transient is a value WordPress caches with an expiry time, stored in the options table or in an object cache if one is installed. Plugins use transients for temporary data such as API responses. ### Tunnel A tunnel, such as ngrok or Cloudflare Tunnel, gives a local development site a temporary public https address. It lets services like Whop deliver webhooks to a store running on your own computer. More: https://whopforwoo.com/docs/whop-sandbox ### Two-factor authentication (2FA) Two-factor authentication requires a second proof, such as an app code, in addition to a password when signing in. It should be on for every WordPress admin and every Whop account that controls payouts. ### Velocity check A velocity check limits how many payment attempts can come from one card, email, IP address or device in a short time. It is a basic defence against card testing and brute-force attacks on checkout. ### Virtual product A virtual product is a WooCommerce product with no shipping, such as a service, a membership or access to content. Checking virtual hides shipping fields and lets paid orders skip the processing status. ### WC-API endpoint The WC-API endpoint is a WooCommerce URL of the form ?wc-api=name that gateways use to receive callbacks. WhopForWoo receives Whop webhooks at https://yourstore.com/?wc-api=whop_webhook. More: https://whopforwoo.com/docs/whop-webhooks ### Webhook A webhook is an HTTP request one system sends to another when an event happens, such as a completed payment. The receiver must verify its signature, since anyone can send a request to a public URL. More: https://whopforwoo.com/docs/whop-webhooks ### Webhook secret A webhook secret is the shared key used to sign and verify webhook requests. Whop's start with ws_, are shown in the Secret column of the webhooks table, and are pasted into WhopForWoo's Webhook Secret field. More: https://whopforwoo.com/docs/whop-webhooks ### Webhook signature A webhook signature is a hash sent with each webhook that proves it came from the sender and was not changed. Whop's is an HMAC-SHA256 of the message ID, timestamp and raw body, keyed with the webhook secret. More: https://whopforwoo.com/docs/whop-webhooks ### Whop Whop is a platform for selling digital products, memberships, software and physical goods, with its own payment processing, payouts and storefronts. Its payments layer can also be used on an external store. More: https://whopforwoo.com/whop-for-ecommerce ### Whop API The Whop API is a REST API at https://api.whop.com/api/v1, authenticated with a Bearer API key. It covers payments, checkout configurations, memberships, refunds, payouts and webhooks. More: https://whopforwoo.com/docs/whop-api ### Whop business A Whop business is the account that owns products, API keys, payments and payouts on Whop. It is identified by a biz_ Account ID, and signing up to Whop creates the first one. More: https://whopforwoo.com/whop-for-business ### Whop checkout limit The Whop checkout limit caps new accounts at $2,500 per checkout. Merchants apply in Settings, Payments to raise it, and Whop says it answers within 24 hours. More: https://whopforwoo.com/whop-payment-limits ### Whop checkout link A Whop checkout link is a shareable URL to a Whop-hosted checkout for a free, one-time or recurring price, created from the Checkout links page of the dashboard. It needs no website integration. More: https://whopforwoo.com/whop-checkout-link-vs-embedded ### Whop Elements Whop Elements are Whop's embeddable UI components, loaded from cdn.whop.com or the @whop/elements packages. For stores, the Checkout element and the payment elements let customers pay without leaving the site. More: https://whopforwoo.com/whop-elements ### Whop financing Whop financing is the program that offers buy now, pay later through Klarna, Afterpay, Sezzle, Splitit and Zip. It costs 15% per financed sale and requires a verified account, a low dispute rate and enough recent volume. More: https://whopforwoo.com/whop-payment-methods ### Whop KYC Whop KYC is the verification a seller completes when setting up Whop Payments: personal or business details, a payout bank account, and an ID with a selfie. Payments can start before it is done, but withdrawals cannot. More: https://whopforwoo.com/whop-kyc-verification ### Whop Payments Whop Payments is the payments layer behind every Whop business, covering cards, wallets, local methods, crypto, financing and payouts. Whop states it is the merchant of record on Whop Payments. More: https://whopforwoo.com/whop-payment-processor ### Whop product A Whop product is what a business sells on Whop, such as a course, community, software or service. Each product has one or more plans that set its price and billing. More: https://whopforwoo.com/whop-for-digital-products ### Whop sandbox The Whop sandbox is Whop's test environment, with its own dashboard at sandbox.whop.com and API at sandbox-api.whop.com. No money moves, and it shares no accounts, keys or webhooks with production. More: https://whopforwoo.com/docs/whop-sandbox ### Whop webhook A Whop webhook is a signed POST request Whop sends to your server when an event happens, such as payment.succeeded. It marks the order paid even if the customer closes the tab before returning. More: https://whopforwoo.com/docs/whop-webhooks ### WhopForWoo WhopForWoo is a WordPress plugin that adds Whop as a WooCommerce payment gateway, with an embedded Whop Elements form, server-side payment verification, signed webhooks and HPOS support. More: https://whopforwoo.com/ ### WooCommerce WooCommerce is an open-source e-commerce plugin that turns a WordPress site into an online store, with products, cart, checkout, orders and payment gateways added through extensions. More: https://whopforwoo.com/whop-for-woocommerce ### WooCommerce logs WooCommerce logs are the files or database entries written by WooCommerce and its extensions, visible under WooCommerce, Status, Logs. Payment gateways write their errors there for troubleshooting. More: https://whopforwoo.com/whop-payment-issues ### WooCommerce payment gateway class The payment gateway class is the PHP class, extending WC_Payment_Gateway, that a plugin registers through the woocommerce_payment_gateways filter. Its process_payment method runs when a customer places an order with that method. More: https://whopforwoo.com/woocommerce-payment-gateways ### WooCommerce REST API The WooCommerce REST API lets external apps read and manage products, orders and customers over HTTP using API keys created in WooCommerce settings. It is separate from the Store API used by the Checkout Block. ### WordPress plugin A WordPress plugin is a package of PHP code that adds features to a WordPress site without editing its core files. It is installed from a zip file or the plugin directory and can be activated or deactivated. More: https://whopforwoo.com/whop-wordpress-plugin ### wp-config.php wp-config.php is the WordPress configuration file holding database credentials, security salts and constants such as WP_DEBUG or DISABLE_WP_CRON. It sits at the site root and should never be publicly readable. ### WP-Cron WP-Cron is WordPress's task scheduler. It runs scheduled tasks when someone visits the site, not at exact times, so low-traffic sites often replace it with a real server cron using DISABLE_WP_CRON.