Webhook

Webhook

POST/notify

Asynchronous notification sent to the pay_notifyurl submitted in the payment request. Verify the signature before updating order status, then respond with `OK`.

Bodyapplication/x-www-form-urlencoded

memberidstringrequiredsign

Merchant ID assigned by the platform.

orderidstringrequiredsign

Merchant order ID.

amountstringrequiredsign

Submitted order amount.

true_amountstringrequiredsign

Amount actually paid by the customer.

currencystringsign

Payment currency.

transaction_idstringrequiredsign

Platform transaction ID.

returncodestringrequiredsign

Transaction status: 00 � success; 2 � failed.

datetimestring, YYYYMMDDHHmmssrequiredsign

Transaction time.

signstringrequired

See MD5 signature algorithm

attachstring

Additional notes passed in the payment request.

POST/notify

Request examplecurl

ScenarioSuccessFailed

curl

curl --request POST \
  --url https://yourdomain.com/notify \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data 'memberid=10153&orderid=O20260601001&amount=1.00&true_amount=1.00&currency=USD&transaction_id=966782078392&returncode=00&datetime=20260601090657&sign=YOUR_SIGN&attach=note'

POST/notify

Handler examplePHPJavaPythonJavascriptGo

php

<?php
$key = 'your_secret_key';
$params = $_POST;
$sign = $params['sign'] ?? '';
unset($params['sign'], $params['attach']);

ksort($params);
$parts = [];
foreach ($params as $name => $value) {
  if ($value !== '' && $value !== null) {
    $parts[] = $name . '=' . $value;
  }
}
$parts[] = 'key=' . $key;
$expected = strtoupper(md5(implode('&', $parts)));

if ($expected !== strtoupper($sign)) {
  http_response_code(400);
  exit('INVALID SIGN');
}

if (($params['returncode'] ?? '') === '00') {
  // TODO: mark order as paid
}

echo 'OK';