Webhooks

Give Payloqa a URL. We POST when a payment finishes. Check the signature before you fulfil the order.

Set the URL and copy the signing secret from the platform in the back office.

We POST JSON. Verify Payloqa-Signature against the secret; ignore anything that does not match.

Common event types: payment.session.paid, payment.session.failed, payment.session.review_amount_mismatch.

Example webhook delivery

POSThttps://your-server.example/webhooks/payloqa

Request body

{
  "id": "evt_01EXAMPLE",
  "type": "payment.session.paid",
  "created_at": "2026-08-30T12:00:30.000Z",
  "data": {
    "id": "pay_01EXAMPLE",
    "status": "paid",
    "goods_minor": 1000,
    "amount_minor": 1000,
    "expected_fee_minor": 25,
    "expected_net_minor": 975,
    "paid_at": "2026-08-30T12:00:30.000Z"
  }
}

Your server

{
  "received": true
}

curl 'https://your-server.example/webhooks/payloqa' \
  -X POST \
  -H 'Content-Type: application/json' \
  -H 'Payloqa-Signature: t=1730000000,v1=…' \
  -H 'Payloqa-Event-Id: evt_01EXAMPLE' \
  -d '{
  "id": "evt_01EXAMPLE",
  "type": "payment.session.paid",
  "created_at": "2026-08-30T12:00:30.000Z",
  "data": {
    "id": "pay_01EXAMPLE",
    "status": "paid",
    "goods_minor": 1000,
    "amount_minor": 1000,
    "expected_fee_minor": 25,
    "expected_net_minor": 975,
    "paid_at": "2026-08-30T12:00:30.000Z"
  }
}'