Refund Webhook

POST/webhook/refund

Base URLhttps://yourdomain.com/webhook/refund

Webhook notification sent when a refund is processed or fails. Configure the Dispute webhook URL in the merchant portal, verify the signature, then respond with `OK`.

Setting

Bodyapplication/x-www-form-urlencoded

memberidstringsign

Merchant ID assigned by the platform.

orderidstringsign

Merchant order ID.

transaction_idstringsign

Platform transaction ID.

amountstringsign

Original order amount.

refund_orderidstringsign

Refund order ID. Returned when alert_type is Refund.

refund_amountstringsign

Refunded amount.

alert_datetimestringsign

Notification timestamp.

alert_contentstringsign

Refund reason or failure description.

alert_typestringsign

Alert type: Ethoca, RDR, Chargebacks, or Refund.

alert_statusstringsign

Refund result: 00 � success; 11 � failed.

signstring

See MD5 signature algorithm

POST/webhook/refund

Request example

Scenario

curl

curl --request POST \
  --url https://yourdomain.com/webhook/refund \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data 'memberid=10153&orderid=O2026060182255&transaction_id=966782078392&amount=1.00&refund_orderid=R20260601001&refund_amount=1.00&alert_datetime=2026-06-01%2009%3A06%3A57&alert_content=Refund%20completed&alert_type=Refund&alert_status=00&sign=YOUR_SIGN'

POST/webhook/refund

Handler example

php

<?php
$key = 'your_secret_key';
$params = $_POST;
$sign = $params['sign'] ?? '';
unset($params['sign']);

ksort($params);
$parts = [];
foreach ($params as $name => $value) {
  if ($value !== '' && $value !== null) {
    $parts[] = $name . '=' . $value;
  }
}
$parts[] = 'key=' . $key;
$expected = strtoupper(md5(implode('&', $parts)));

if ($expected !== strtoupper($sign)) {
  http_response_code(400);
  exit('INVALID SIGN');
}

if (($params['alert_status'] ?? '') === '00') {
  // TODO: update refund status
}

echo 'OK';