Webhooks

Webhook endpoints are managed in the merchant developer portal (not via the HMAC programmatic API).

Events

transfer.completed, transfer.failed
vas.completed, vas.failed
wallet.credited
crypto.confirmation_required, crypto.completed, crypto.failed

Delivery headers

X-Webhook-Event
X-Webhook-Timestamp
X-SendPadi-Signature — HMAC-SHA256(secret, JSON.stringify(body)) hex

Configure HTTPS callback URLs only. See Verifying webhooks.