" Refund not going through woocommerce"
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
We use paypal standard payment gateway which comes with woocommerce, but recently we can't do refunds thorugh paypal in our woocommerce, whenever we try to do it , we get " SECURITY HEADER NOT VALID" error, could someone hlep us to solve this issue.
Eagerly waiting for your kind reply.

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Usually "Security Header Not Valid" means that the API credentials that were entered are not correct.
Here's how to request or view API credentials from your PayPal Account:
- Log in to your PayPal account.
- Click Profile near the top of the page and then click Profile and settings.
- Click My selling tools.
- Click Update next to "API access."
- Scroll down to "NVP/SOAP," click "Manage API credentials."
- Select "Request API signature" or you can view the API Signature if already requested
- Click show on all options
- Copy and paste the credentials into WooCommerce (Make sure there are no spaces before or after the credentials as this will cause the Security Header Invalid Error Message)
From the WooCommerce (3rd Party Shopping Cart) Documentation :
WooCommerce PayPal Standard Setup
If you click on the setup and Configuration and then API Credentials you will see the information from WooCommerce.
Thank you,
Jennifer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have exactly the same problem! Payments work, only refunds do not.
Kindly asking for a professional reply! Thanks in advance!
did check all the API-settings (and IPN) in the woocommerce plugin (called paypal standard), and still no change. We also tested from different locations (even countries) and computers.
this is my log:
2021-04-08T11:39:57+00:00 INFO Received valid response from PayPal IPN
2021-04-08T11:39:57+00:00 INFO Found order #1322
2021-04-08T11:39:57+00:00 INFO Payment status: completed
2021-04-08T11:49:47+00:00 INFO Refund Response: Array
(
[headers] => Requests_Utility_CaseInsensitiveDictionary Object
(
[data:protected] => Array
(
[content-type] => text/plain; charset=utf-8
[content-length] => 234
[date] => Thu, 08 Apr 2021 11:49:47 GMT
[cache-control] => max-age=0, no-cache, no-store, must-revalidate
[caller_acct_num] => (edited)
[paypal-debug-id] => 1dcad1b492901
[x-paypal-api-rc] => 10002
[x-paypal-operation-name] => RefundTransaction
[x-slr-retry-api] => RefundTransaction
[http_x_pp_az_locator] => ccg13.slc
[strict-transport-security] => max-age=31536000; includeSubDomains
)
)
[body] => TIMESTAMP=2021%2d04%2d08T11%3a49%3a47Z&CORRELATIONID=1dcad1b492901&ACK=Failure&VERSION=84%2e0&BUILD=55475691&L_ERRORCODE0=10002&L_SHORTMESSAGE0=Security%20error&L_LONGMESSAGE0=Security%20header%20is%20not%20valid&L_SEVERITYCODE0=Error
[response] => Array
(
[code] => 200
[message] => OK
)
[cookies] => Array
(
)
[filename] =>
[http_response] => WP_HTTP_Requests_Response Object
(
[response:protected] => Requests_Response Object
(
[body] => TIMESTAMP=2021%2d04%2d08T11%3a49%3a47Z&CORRELATIONID=1dcad1b492901&ACK=Failure&VERSION=[Removed. Phone #s not permitted]AGE0=Security%20error&L_LONGMESSAGE0=Security%20header%20is%20not%20valid&L_SEVERITYCODE0=Error
[raw] => HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
Content-Length: 234
Connection: close
Date: Thu, 08 Apr 2021 11:49:47 GMT
Cache-Control: max-age=0, no-cache, no-store, must-revalidate
Caller_acct_num: (edited)
Paypal-Debug-Id: 1dcad1b492901
X-Paypal-Api-Rc: 10002
X-Paypal-Operation-Name: RefundTransaction
X-Slr-Retry-Api: RefundTransaction
HTTP_X_PP_AZ_LOCATOR: ccg13.slc
Strict-Transport-Security: max-age=31536000; includeSubDomains
TIMESTAMP=2021%2d04%2d08T11%3a49%3a47Z&CORRELATIONID=1dcad1b492901&ACK=Failure&VERSION=[Removed. Phone #s not permitted]AGE0=Security%20error&L_LONGMESSAGE0=Security%20header%20is%20not%20valid&L_SEVERITYCODE0=Error
[headers] => Requests_Response_Headers Object
(
[data:protected] => Array
(
[content-type] => Array
(
[0] => text/plain; charset=utf-8
)
[content-length] => Array
(
[0] => 234
)
[date] => Array
(
[0] => Thu, 08 Apr 2021 11:49:47 GMT
)
[cache-control] => Array
(
[0] => max-age=0, no-cache, no-store, must-revalidate
)
[caller_acct_num] => Array
(
[0] => (edited)
)
[paypal-debug-id] => Array
(
[0] => 1dcad1b492901
)
[x-paypal-api-rc] => Array
(
[0] => 10002
)
[x-paypal-operation-name] => Array
(
[0] => RefundTransaction
)
[x-slr-retry-api] => Array
(
[0] => RefundTransaction
)
[http_x_pp_az_locator] => Array
(
[0] => ccg13.slc
)
[strict-transport-security] => Array
(
[0] => max-age=31536000; includeSubDomains
)
)
)
[status_code] => 200
[protocol_version] => 1.1
[success] => 1
[redirects] => 0
[url] => https://api-3t.paypal.com/nvp
[history] => Array
(
)
[cookies] => Requests_Cookie_Jar Object
(
[cookies:protected] => Array
(
)
)
)
[filename:protected] =>
[data] =>
[headers] =>
[status] =>
)
)
2021-04-08T11:49:47+00:00 INFO Refund Result: stdClass Object
(
[TIMESTAMP] => 2021-04-08T11:49:47Z
[CORRELATIONID] => 1dcad1b492901
[ACK] => Failure
[VERSION] => 84.0
[BUILD] => 55475691
[L_ERRORCODE0] => 10002
[L_SHORTMESSAGE0] => Security error
[L_LONGMESSAGE0] => Security header is not valid
[L_SEVERITYCODE0] => Error
)

Haven't Found your Answer?
It happens. Hit the "Login to Ask the community" button to create a question for the PayPal community.
- where does paypal payments go to if there is no linked phone or email to the seller ? in PayPal Payments Standard
- No way to contact company and I want a refund! Please help. in PayPal Reporting
- Payments Refunded Automatically After Successful Transactions - PayPal Business Account Issue in REST APIs
- iDEAL payments being refunded back to customers in PayPal Payments Standard
- How can I revoke SamCart's access my recurring payments? in NVP/SOAP APIs