Processing callbacks
Set up an HTTPS webhook endpoint where CryptoProcessing can send callbacks. Your webhook URL must use HTTPS, use a domain name, and be considered safe by VirusTotal and similar scanners. After you create the endpoint, register it in CryptoProcessing. In your merchant settings, open the Callbacks tab and enter your endpoint address in the Callback URL field. When CryptoProcessing sends a callback to your endpoint, your system should:Validate the callback
Generate an HMAC-SHA512 signature for the callback request body using your secret key, then compare it with the value in the
X-Processing-Signature header.Process the event
Check whether the callback is a duplicate by verifying that its transaction ID has not already been processed. If it has not, process the event, for example by updating the customer’s balance in your system.
For additional security, you can whitelist the CryptoProcessing IP addresses used for callback delivery. Contact support for the current list of IP addresses.