Webhooks

Signed events to your server when an order changes, a top-up lands or your balance runs low.

Add an https endpoint in your dashboard under Developers and pick the events you want (none picked = all):

Event	When
`order.updated`	an order changes status, or money comes back for it
`deposit.credited`	a top-up is added to your balance
`balance.low`	your balance runs low

What arrives

A POST of JSON { id, type, created, data } with two headers:

Fimi-Signature: t=<unix>,v1=<hex> — an HMAC-SHA256 of "<t>.<raw body>" with your endpoint's whsec_… secret. Check it before you trust a delivery.
Fimi-Event-Id — the event id. Delivery is at least once, so skip ids you've already seen.

Reply with any 2xx within 10 seconds. Anything else is retried with growing gaps (1 min, 2, 4 … up to 6 h apart) for about a day.

Up to 10 webhooks per account; the address must be public https://. Webhooks are managed from the signed-in dashboard only.

Code to verify a signature: Developers → Webhooks.

Didn’t answer it?

Ask the chat — it can also check your own orders when you’re signed in.