Skip to main content
pawaPass sends a POST request to your pre-configured callback URL when a verification event occurs. See Webhooks for setup details and best practices.

Headers

string
required
application/json
string
required
SHA256 HMAC signature of the raw request body, signed with your secret key. See Signature verification.

Body

string
required
Unique identifier for this notification. Use for deduplication.
string
required
Event type. One of VERIFICATION.STATUS_CHANGE or VERIFICATION.IDENTITY_DOCUMENT_CHANGE.
string
required
Always VERIFICATION.
string
required
ISO 8601 timestamp of when the event was created.
object
required
The full verification object.