Webhook Events
Kyc updated
Fired when a programmatic KYC submission is reviewed.
Statuses: kyc_proposed → kyc_approved (or kyc_rejected).
On rejection, updateReason and userMessage explain what needs to be corrected. When needsWork is true, the customer can resubmit without creating a new KYC request.
WEBHOOK
Authorizations
API key sent in the Authorization header.
Headers
HMAC-SHA256 signature: sha256={hex}. Computed over the canonicalized (RFC 8785) request body using your webhook secret.
Body
application/json
Webhook envelope for KYC review decisions.
Payload for kyc_updated webhooks.
Example:
Response
200
Return any 2xx to acknowledge receipt.