ClickBank and PayPal are both Tier 1 native integrations. WCT reads every field it needs from the incoming POST body, so there are no tokens to build into the URL.
ClickBank Setup:
- Hoplinks are handled for you. Paste your raw ClickBank hoplink straight into the Destination URL field of your tracking link. WCT detects hop.clickbank.net and injects ?tid=<click_id> automatically. Power users can still set ?tid= by hand to override the automatic value.
- In ClickBank go to Account Settings, then My Site, then Advanced Tools, then Instant Notification URL (INS).
- Set INS Version to 6.0 or higher.
- Paste this URL: https://yoursite.com/?wct_postback=1&source=clickbank
- Click Save, then use ClickBank's Send Test to confirm a 200 response.
ClickBank Security, Optional:
Add your ClickBank secret key as the WordPress option wct_clickbank_ipn_secret to enable INS 6.x chash signature verification. Without it, notifications are accepted unverified, protected only by the fact that the URL is not public.
ClickBank Events Handled Automatically:
SALE, BILL for rebills, RFND for refunds, CGBK for chargebacks, INSF for insufficient funds, and CANCEL-REBILL.
PayPal Setup:
WCT auto detects PayPal IPN posts by the presence of payment_status, txn_id and payer_email, and reads every field from the body.
- Pass the click ID through PayPal's custom field. For Buy Now and PayPal Standard buttons, add a hidden input named custom and fill its value server side, or with a shortcode or dynamic content plugin that reads the buyer's cookie. For PayPal Checkout and the SDK, set the custom property when you create the order. With WooCommerce, most PayPal gateways already populate custom from the order ID, so you usually need a small filter to inject the click ID instead.
- In PayPal go to Profile, then My Selling Tools, then Instant Payment Notifications, then Choose IPN Settings.
- Paste this URL: https://yoursite.com/?wct_postback=1&source=paypal
- Set Receive IPN messages to ON.
- Save, then check PayPal's IPN history after the next sale to confirm delivery.
PayPal Spoofing Protection:
Every PayPal IPN is verified using PayPal's own cmd=_notify-validate handshake. That adds roughly one to two seconds per notification but eliminates fake sale spam. If you are working against the PayPal sandbox you can disable it per site with add_filter('wct_paypal_verify_ipn', '__return_false');
PayPal Events Handled Automatically:
Completed becomes a sale. Refunded, Reversed and Denied become refunds. Subscription rebills arrive as txn_type=subscr_payment. Pending payments are skipped on purpose, because PayPal sends a second Completed notification once the payment clears.