POST to your webhook URL with ?reference=… appended. Set the URL and the signing secret in the dashboard API settings.
What we send
What you answer
2xx within 10 seconds.
Retries
Body
Best practices
Process each notification once
Process each notification once
The same notification may arrive twice. Store the
deliveryId and skip any you have already processed.Trust payment.status, not arrival order
Trust payment.status, not arrival order
Events may arrive out of order. Always trust
payment.status in the body.Verify every request
Verify every request
Check the signature and reject stale timestamps before doing anything else.
Ignore what you don't know
Ignore what you don't know
New optional fields and events may appear. Ignore them safely.
