FAQ

Common questions from buyers evaluating or running Zoho Payments for WHMCS. See Troubleshooting for problem-and-fix steps.

Does it work with both the India and US Zoho data centres?

Yes. The gateway supports both the India (.in) and US (.com) data centres. Set the Data Center field to IN or US to match where your Zoho account and credentials live. Your OAuth app and Widget API Key must come from the same data centre you select.

Is the checkout an embedded widget or a redirect?

It's an embedded widget. When the customer clicks Pay Now, the Zoho Payments widget opens right on the invoice page with the available payment options — the customer never leaves your WHMCS invoice. See Widget checkout.

What is the refresh token and why do I need one?

Zoho uses OAuth2. The refresh token lets the gateway obtain short-lived access tokens automatically, so it can verify payments without you re-authorising each time. You generate it once with the "Click Here to Generate Token" helper link in the gateway settings — see the Zoho OAuth setup guide.

Do I ever need to regenerate the refresh token?

Only if it stops working — for example if it's revoked in Zoho or you change credentials. If you see OAuth errors in the Gateway Log, regenerate the token with the helper link and paste the new one into WHMCS.

Is card data stored in WHMCS?

No. Customers enter their payment details inside the Zoho Payments widget, and the payment is processed by Zoho. WHMCS receives the result and records the transaction and fees — it doesn't store card numbers.

How does the gateway know a payment really succeeded?

Every payment is verified against the Zoho API before the invoice is marked paid, and Payment Link notifications arrive through a signed webhook (HMAC-SHA256) that's also re-verified. This prevents an invoice being marked paid on an unconfirmed result.

What happens if my license lapses?

New payments are blocked — the customer sees "Online payment is temporarily unavailable. Please contact us to complete your order." But any payment already in progress at Zoho is still verified and recorded, so nothing is lost. Renew or re-enter your key to restore new payments. See Licensing.

Does a lapsed license lose payments customers already made?

No. If a customer has already paid at Zoho when the license is inactive, that payment is still verified and the invoice is marked paid. The block only stops new payments from starting.

Does it support Payment Links?

Yes. Payment Link payments are confirmed asynchronously through the webhook — when Zoho reports the link as paid, the gateway verifies it and updates the invoice. See Webhooks and Payment Links.

Why does the webhook need SSL?

Zoho delivers webhook events over HTTPS to your endpoint. A valid SSL certificate is required so events are delivered and can be trusted; an expired or self-signed certificate stops delivery.

How do I update the gateway?

There's no in-app updater. Download the latest build from your WHMCS client area and overwrite the gateway files. Leased licenses download updates while active; Lifetime licenses need active Support & Updates for newer versions. See Updating.

Where do I see gateway activity and errors?

In the Gateway Log at Utilities → Logs → Gateway Log. It records payment attempts, license messages, and OAuth or webhook failures — always your first stop when diagnosing an issue.

Related pages

• Widget checkout — the in-page payment experience
• Zoho OAuth setup — app, refresh token, webhook
• Licensing — what the license gates
• Troubleshooting — problem and fix