# Is Whop checkout safe? What protects buyers and merchants > Is Whop checkout safe and legit? Card fields, 3D Secure, fraud screening, disputes and reserves explained, plus what a store integration must check. Updated: 2026-11-11 ยท Canonical: https://whopforwoo.com/is-whop-checkout-safe **Yes, Whop checkout is safe to pay with: card details are typed into Whop's PCI-isolated fields on Whop's own domain, payments go through 3D Secure and fraud screening, and Whop acts as merchant of record.** The real risks sit elsewhere: for buyers, the seller you're buying from; for merchants, reserves, disputes and an integration that ships orders without checking the payment. ## For buyers: is Whop checkout legit? | Protection | What it means | |---|---| | PCI-isolated card fields | Card numbers are entered inside Whop's component, not on the seller's site or server | | 3D Secure | Your bank can ask you to confirm the payment in its app | | Fraud screening | Whop runs machine-learning fraud detection on transactions | | Merchant of record | Whop is the seller of record on Whop Payments, which makes it accountable for disputes | | Refund paths | Ask the seller, open a Resolution Center case, or dispute with your card issuer | Two caveats: - **Crypto payments are final.** Whop's docs state there is no chargeback or dispute mechanism for on-chain payments. - **Whop vets businesses, not each product.** Whop publishes a list of prohibited businesses and reviews accounts, but you should still check the seller's site, contact details and refund policy before buying. If you see a Whop charge on your statement you don't recognise, start with your email receipts, then Whop's Resolution Center. ## For merchants: is Whop payment safe? Whop handles the card data and the payout, but three things affect your money: **Reserves.** Whop may hold part of your balance, for example on a new account, a high dispute rate, delayed delivery (pre-orders) or a sudden change in volume. A rolling reserve holds a percentage of each sale for a set number of days; a fixed reserve holds a lump sum. Reserved funds are still yours and release automatically on the dates shown in **Balances**. Financing providers set their own holds (Splitit: 15% for 180 days). **Disputes.** $15 per card dispute, $29 per early dispute alert (RDR / Ethoca). SEPA and ACH have their own return and dispute fees. Keep descriptions clear and delivery proof handy. **Prohibited categories.** Selling something on Whop's prohibited list (adult content, vapes and nicotine, cannabis and CBD, unlicensed streaming, unregulated supplements, among others) puts the account and its balance at risk. No plugin changes that. ## What makes an embedded Whop checkout safe The weak point of a Whop checkout on your own site is not Whop; it's the code that decides an order is paid. Whop's own developer guide warns that the return page can be faked by typing `status=succeeded` in the URL. A safe integration: 1. Creates the order before payment, with a price set on the server, not in the browser. 2. Verifies the webhook signature (Standard Webhooks, HMAC-SHA256) and rejects old timestamps. 3. Reads the payment back from Whop's API. 4. Checks that order, amount and currency match before marking paid. 5. Never exposes the API key or webhook secret to the browser. WhopForWoo does all five, de-duplicates webhooks, locks each order against double completion, and lists any charged-but-unmatched payment in **Status & Tools**. The card form stays in Whop's iframe, so card data never reaches your WordPress server. ![Order note showing payment verified against Whop API: amount and currency matched](https://whopforwoo.com/img/safe-checkout-order-note-verified.png) Details of the checks are on [Whop payment integration](https://whopforwoo.com/whop-payment-integration). Get WhopForWoo: https://whopforwoo.com/pricing ## FAQ ### Is Whop checkout legit? Yes. Whop Payments is a real payment platform that acts as merchant of record for its sellers, runs PCI-compliant infrastructure and pays out in 200+ countries. Whether a given seller is trustworthy is a separate question: check who you are buying from. ### Is it safe to enter my card on a Whop checkout? Card details are entered in Whop's PCI-isolated fields on Whop's domain, not on the seller's server. Whop also uses 3D Secure and machine-learning fraud screening. ### Can I get my money back if I pay through Whop? You can ask the seller for a refund, open a case in Whop's Resolution Center, or dispute a card payment with your bank. Crypto payments can't be disputed because on-chain transactions are irreversible. ### Is Whop payment safe for merchants? Payments are processed and paid out by Whop, but Whop can hold part of your balance in reserve and charges $15 per dispute. A merchant integration should verify every payment server-side before shipping. ### Is an embedded Whop checkout on another website safe? The card fields still run in Whop's iframe. What matters is that the site confirms the payment with Whop before delivering, which WhopForWoo does with signed webhooks and an API read-back. ## Related - [Whop checkout: the three ways customers can pay you through Whop](https://whopforwoo.com/whop-checkout): Whop checkout comes as a hosted page, a checkout link or an embedded form. How each works, what it supports, and how to put it on a WooCommerce store. - [Whop payment integration: connect Whop checkout to WooCommerce](https://whopforwoo.com/whop-payment-integration): How a Whop payment integration works end to end: API key, checkout configuration, Whop Elements, signed webhooks and server-side checks, on WooCommerce. - [Whop fees: what Whop charges per payment and per payout](https://whopforwoo.com/whop-fees): Whop fees in 2026: 2.7% + $0.30 per domestic card payment, plus international, conversion, tax and payout fees. Worked examples and a fee calculator. - [Whop WooCommerce plugin: Whop checkout inside your store](https://whopforwoo.com/): Connect Whop to WooCommerce. Whop's payment form sits inside your checkout, every payment is verified server-side, and orders exist before anyone pays.