Webhook Notifications

Webhook Payload

This is the JSON data structure sent to your selected callback URL when a status changes.

Sample JSON Payload

Here is an example of what your server will receive exactly:

{
  "userId": "1234",
  "orderId": "5943283783228437583",
  "amount": 100,
  "status": "FAILED",
  "secretKey": "32435j4kh53kj45"
}

🔐 Webhook Verification

How to verify that the webhook request is legitimate and not forged.

Every webhook response includes the secretKey that you originally sent in your deposit or withdrawal API request. To verify the webhook:

1. Store the secretKey you sent during payment/withdrawal creation on your server.
2. When you receive a webhook, compare the secretKey in the payload with the one stored on your server.
3. If they match, the webhook is valid. If not, reject the request.

// Example: Verify webhook on your server (Node.js)
app.post('/webhook', (req, res) => {
  const { userId, orderId, amount, status, secretKey } = req.body;

  // Compare with the secretKey you stored during payment creation
  const storedSecretKey = getStoredSecretKey(orderId); // your DB lookup

  if (secretKey !== storedSecretKey) {
    return res.status(401).json({ error: 'Invalid webhook signature' });
  }

  // Webhook is valid — process the payment update
  console.log(`Order ${orderId} status: ${status}`);
  res.status(200).json({ received: true });
});

Transaction Statuses

The status property indicates the latest state of the payment. Handle these states programmatically.