Back to Gateway Index
Whop logo
Payment Gateway

Whop

All-in-one creator commerce: communities, courses, and digital products

Builder Verdict

Pick Whop if you sell access-based products (Discord/Telegram communities, courses, software licenses) and want a built-in marketplace plus an optional Merchant-of-Record mode — but be ready for strict risk controls and reserves.

Complexity

◆◆ Moderate

Region

200+ countries

Fees

2.7% + $0.30 (cards) plus reported 3% platform fee

Whop is a creator commerce platform for digital products, gated communities, and software access. It bundles checkout, multi-PSP payment orchestration, KYC, global payouts (instant, ACH, crypto, wire), Discord/Telegram access automation, a native affiliate program, and an optional Merchant-of-Record mode for sales-tax remittance. Founded in 2021 and based in Brooklyn, it has scaled rapidly but draws criticism for marketplace spam and aggressive account/payout holds when its risk system flags an account.

Last full audit: April 15, 2026

01

Trust Score Breakdown

Account Stability

55/100

Public Trustpilot, BBB and Medium write-ups document accounts being suspended or fully refunded by Whop's risk team, sometimes with limited communication. Whop's documented Dispute Risk Score auto-suspends accounts above 5 and holds funds 90 days minimum.

Developer Experience

80/100

Modern public REST API at api.whop.com, official @whop/sdk for TypeScript/Next.js, signed webhooks with SDK helper for verification, sandbox environment, and a documented developer portal. Closer to Stripe-grade than to legacy MoR platforms.

Payout Reliability

62/100

Whop offers instant global payouts (ACH, RTP, crypto, Venmo, wire) and works in 200+ territories, but creators repeatedly report long compliance/KYC holds — 90+ days in many cases — and rolling reserves of $19k+ when their internal Dispute Risk Score climbs above 5.

Support Quality

55/100

Trustpilot reviews mention specific named support staff favorably, but complaint volumes for slow or vague replies during disputes, suspensions and refund cases are equally common. No published SLA.

Track Record

70/100

Whop launched in 2021, has scaled to billions in GMV, and now powers payments for 27,000+ businesses across 187+ countries. Still relatively young and the Discover marketplace continues to draw spam and low-quality-product complaints.

Transparency

70/100

docs.whop.com/fees enumerates processing, payout, fraud and optional fees explicitly, and Whop publicly announced the May 2025 elimination of the 30% marketplace cut. However, the widely-reported 3% platform fee on self-sourced sales is not visible on the public fees doc as of this audit and was sourced only from third-party blogs.

02

Availability Matrix

Region Countries Currencies Payout Timing
Global 200+ countries supported (195+ for selling, 241+ territories for payouts) 135+ currencies, 100+ payment methods Same-day instant via RTP/crypto; next-day ACH; bank wires settle in 1-3 business days
NOT Available US-sanctioned/embargoed countries (Cuba, Iran, North Korea, Syria, Russia/Belarus restrictions, etc.) and any party on US Government prohibited lists — —
03

Feature Snapshot

✓

Subscriptions / Recurring

Native subscriptions, free trials, payment plans, and one-time charges across all product types.

✓

Discord / Telegram access gating

Built-in Discord and Telegram apps automatically grant/revoke roles based on subscription state.

✓

Embeddable / hosted checkout

Hosted checkout, embed scripts, and APIs for custom flows; supports Apple Pay, cards, and crypto.

✓

Affiliate program

Native affiliate system with creator-set commissions, tracking links, and an affiliate dashboard. Whop fee is 1.25% per affiliate transaction.

✓

Marketplace / Discover

Whop Discover surfaces products to ~5M+ monthly browsers; the previous 30% marketplace cut was removed in May 2025, so marketplace and self-sourced sales now share the same fee.

~

Merchant of Record (MoR) mode

Optional MoR add-on (0.5% Tax & Remittance fee). When enabled, Whop calculates, collects and remits sales tax/VAT/GST and absorbs related liability; otherwise the creator remains seller of record.

✓

Webhooks + public API

Signed webhooks (HMAC), official @whop/sdk for TypeScript with `webhooks.unwrap` helper, REST API with sandbox.

✓

Crypto / Stablecoin payouts

Crypto and stablecoin payouts available globally at 5% + $1 per payout.

~

Course / content delivery

Hosts courses, downloadable files, and gated software access, but lacks deep student analytics and granular module-level progress tracking.

04

Pricing Breakdown

Card processing (US domestic) 2.7% + $0.30 per transaction
International card surcharge +1.5% on top of base processing
Currency conversion +1% when conversion required
Whop platform fee (self-sourced sales) 3% reported by third parties; not present on docs.whop.com/fees as of audit
ACH payment (customer) 1.5% (max $5)
Tax & Remittance (MoR mode) 0.5% per transaction when enabled
Billing automation 0.5% per transaction (optional)
Payment orchestration 0.8% per transaction (optional)
Affiliate processing 1.25% per affiliate-attributed transaction
3D Secure authentication $0.03 per transaction
Radar fraud detection $0.07 per transaction
Chargeback / dispute $15.00 per dispute
Early dispute alert $29.00 per alert
Payout — Next-day ACH $2.50 per payout
Payout — Instant (RTP) 4% + $1.00 per payout
Payout — Crypto / Venmo 5% + $1.00 per payout
Payout — Bank wire $23.00 per payout
Monthly platform fee $0 — no monthly subscription, you only pay when you sell
05

Security & Compliance

PCI DSS (via processor) Card data is handled by Whop's PSPs (Stripe Level 1 + others through multi-PSP orchestration); Whop itself does not publish a PCI compliance level on a public trust page.
3D Secure Supported, charged at $0.03 per authenticated transaction
Fraud detection (Radar) ML-based risk scoring at $0.07 per transaction; powered through Stripe Radar pipeline
Dispute / chargeback tooling Built-in Dispute Fighter for evidence submission, Resolution Center for early flagging, Early Dispute Alerts ($29 each), and a Dispute Risk Score that triggers auto-reserves when high
KYC / identity verification Mandatory KYC via Whop and third-party identity verification providers before payouts can be received
Webhook signing HMAC-signed webhooks; @whop/sdk exposes `webhooks.unwrap` for signature verification
SOC 2 / ISO 27001 No public SOC 2 or ISO 27001 attestation found on a Whop-operated trust page during this audit
06

Integration Prompt

✂

Copy & use this 3033-char integration prompt

Production-ready prompt for Claude / GPT / Cursor — handles setup, security, webhooks & gotchas

 
You are integrating Whop into a [Django / Next.js / etc.] application. Build a production-grade integration that follows Whop's official conventions:

1. **SDK choice.** For TypeScript/Node use the official `@whop/sdk` (`npm install @whop/sdk`). Initialize with `appID` (`NEXT_PUBLIC_WHOP_APP_ID`), `apiKey` (`WHOP_API_KEY`, server-only), and `webhookKey` (`WHOP_WEBHOOK_SECRET`, server-only). For other stacks use the REST API at `https://api.whop.com` with bearer-token auth using the same API key.
2. **Checkout.** Prefer Whop's hosted checkout URL or embed widget — never collect raw card data yourself. Pass a unique internal order/user reference in `metadata` so you can reconcile webhooks back to your DB rows.
3. **Webhooks (critical).** Create a single webhook endpoint (e.g., `/api/webhooks/whop`). Read the raw request body before any JSON parsing, then call `whop.webhooks.unwrap(rawBody, headers)` (TS) or perform the equivalent HMAC verification. Reject any request whose signature does not validate. Subscribe at minimum to `payment.succeeded`, `payment.refunded`, `membership.went_valid`, `membership.went_invalid`, and `dispute.opened`. Make every handler idempotent (key on Whop event id) — webhooks may retry.
4. **Access provisioning.** On `membership.went_valid` grant access in your system; on `membership.went_invalid` (subscription cancelled/lapsed) revoke access. Do not grant access on `payment.succeeded` alone — wait for the membership lifecycle event.
5. **MoR vs Stripe-Connect mode.** Decide explicitly whether you enable Whop's Merchant-of-Record mode (Tax & Remittance, +0.5%): if MoR is on, Whop is liable for sales tax/VAT/GST and you should not collect or remit it yourself; if MoR is off, you remain Seller of Record and must handle tax compliance in-app. Document the choice for your accounting team.
6. **License key / access verification (server-side).** When a user requests a gated resource, verify their access via the SDK (`whop.access.checkAccess({ userId, productId })`) on your server — never trust client-side membership claims.
7. **Disputes & risk hygiene.** Watch `dispute.opened` events and resolve refund requests inside your app before they become bank chargebacks; subscribe to Early Dispute Alerts in the dashboard. Keep your Dispute Risk Score below 5 to avoid the 90-day reserve hold.
8. **Reconciliation.** Persist Whop `payment_id`, `membership_id`, and `event_id` on every related row in your DB. Run a nightly job that pulls the Whop payments list and asserts every paid order in your system has a corresponding Whop record (and vice versa).
9. **Secrets & environments.** Use Whop's sandbox (`sandbox.whop.com`) for development; never reuse production API keys in dev. Store `WHOP_API_KEY` and `WHOP_WEBHOOK_SECRET` in a server-only secret store. Never expose them via `NEXT_PUBLIC_*`.
10. **PCI scope.** Because Whop hosts checkout and you never touch card numbers, you fall under PCI SAQ-A scope. Do not introduce any flow that posts card data through your own server.

Replace [Django / Next.js / etc.] with your stack. Follows PCI DSS best practices and handles common edge cases.

07

Common Pitfalls

5 items
1

Dispute Risk Score auto-suspends accounts

Whop computes a Dispute Risk Score per merchant; once it crosses 5, the account can be suspended and funds held in reserve for at least 90 days. Even a small spike of friendly-fraud chargebacks against a digital product can trigger this. Mitigate by aggressively using Early Dispute Alerts ($29 each) and refunding pre-emptively.

2

Long KYC / compliance holds on payouts

Multiple creators publicly report payouts frozen for 90-120+ days during compliance review, sometimes for five-figure amounts ($19k-$25k+). Communication is reported as slow. Submit KYC documents proactively before scaling and keep a runway buffer.

3

Marketplace spam dilutes Discover quality

Trustpilot and review write-ups consistently flag the Whop Discover marketplace as cluttered with low-quality 'get-rich-quick' communities and seemingly fabricated reviews, which can harm the credibility of legitimate products listed alongside them.

4

Platform fee not on public fees doc

The 3% platform fee on self-sourced sales is widely cited in 2026 third-party reviews but is not enumerated on docs.whop.com/fees alongside processing/payout fees. Confirm exact fee live in your dashboard before pricing your product.

5

Refund disputes can cascade to seller suspension

Customer refund disputes that escalate to chargebacks affect the Dispute Risk Score directly, and there are documented cases of Whop refunding all customers and suspending the creator account even where the creator provided proof of delivery.

08

Community Pulse

Sentiment in 2026 is split. Creators praise Whop for the zero monthly fee, fast onboarding, modern Discord/Telegram automation, and the Discover marketplace as a free distribution layer — particularly for new sellers without an audience. The dominant complaints are operational: long KYC and compliance holds on payouts, account suspensions tied to a strict internal Dispute Risk Score, slow or vague support replies during disputes, and a Discover marketplace flooded with low-quality 'get-rich-quick' communities and seemingly fake reviews that hurt the credibility of legitimate products. The May 2025 removal of the 30% marketplace cut was widely welcomed.

💬 Whop Reviews — Customer Service Reviews of whop.com Trustpilot · 2026
💬 Whop — BBB Complaints Better Business Bureau · 2026
💬 Whop Suspended My Account (And You Could Be Next) Medium · 2025
💬 Whop Review (2026) — Too Good, But ONE Downside BloggingX · 2026
💬 Whop Review: Real Fees, Real Talk (2026) Paprika.bot · 2026
💬 Whop Pricing 2026: Plan Comparison, Transaction Fees & Alternatives SchoolMaker · 2026

Sentiment last updated: April 2026 · We summarize — never copy — community content. Links go to original threads.

09

Changelog

  1. logo

    Downloaded Whop logo SVG from Wikimedia Commons (CC BY 4.0), converted to 400x107 transparent PNG via resvg_py. Brightness avg 80 (dark wordmark) — left logo_bg empty.

  2. pricing

    Initial pricing scrape from official docs.whop.com/fees: card 2.7% + $0.30, ACH 1.5% (max $5), MoR 0.5%, instant payouts 4%+$1, crypto/Venmo 5%+$1, wire $23, dispute $15, early dispute alert $29, 3DS $0.03, Radar $0.07, affiliate 1.25%.

  3. pricing

    Recorded reported 3% platform fee on self-sourced sales as confidence=unverified — fee is widely cited in 2026 third-party reviews but is not visible on docs.whop.com/fees as of this audit.

  4. availability

    Recorded global availability — 200+ selling countries, 241+ payout territories, 135+ currencies. Excluded US-sanctioned/embargoed jurisdictions per ToS.

  5. features

    Initial feature inventory: subscriptions, Discord/Telegram gating, hosted+embed checkout, native affiliate program, Discover marketplace (30% cut removed May 2025), MoR mode, signed webhooks + @whop/sdk, crypto payouts, basic course/content delivery.

  6. security

    Recorded multi-PSP processing (Stripe + others), 3DS, Radar, Dispute Fighter/Resolution Center/Risk Score, KYC requirement, signed webhooks. Flagged absence of public SOC 2 / ISO 27001 attestation.

  7. pitfalls

    Documented five recurring 2026 pitfalls: Dispute Risk Score auto-suspension, long KYC/compliance holds, marketplace spam, undocumented platform fee, refund-cascade suspensions.

  8. community

    Initial community pulse drafted from 2025-2026 Trustpilot, BBB, Medium and review-blog sources (no direct Reddit thread URLs surfaced).

  9. trust_score

    Initial trust score 66/100 — strong DX (80) and track record (70), weaker account stability (55) and support (55) due to documented suspension and payout-hold reports.

  10. integration_prompt

    Authored integration prompt covering @whop/sdk setup, hosted checkout, signed-webhook verification with `webhooks.unwrap`, MoR vs SoR decision, server-side access checks, Dispute Risk Score hygiene, sandbox usage, and PCI SAQ-A scope.

Back to Gateway Index

LearnWithHasan.com · Payment Gateway Index · No affiliate links · Builder-first