Webhooks

Configurez votre URL webhook dans le portail marchand. HeyQo signe chaque envoi avec HMAC-SHA256 dans l\u2019en-tête X-HeyQo-Signature.

expected = HMAC_SHA256(raw_request_body, your_webhook_secret)
valid = hmac.compare_digest(request.headers['X-HeyQo-Signature'], expected)

Événements souscrits

Leave empty in the merchant portal to receive all events. Wildcards: card.*, card.visa_gold.*, transfer.*, customer.visa_gold_kyc.*

• All Card Events — card.*
• All Transfer Events — transfer.*
• Card Created — card.created
• Card Terminated — card.terminated
• Card Withdrawal — card.withdrawal
• Card Charged — card.charged
• Card Refund — card.refund
• Card Funded — card.funded
• Card Decline Charge — card.decline.charge
• Card Decline Wallet Charge — card.decline.wallet.charge
• Card Declined — card.declined
• Card Code — card.code
• Card Termination Refund — card.termination.refund
• Account Funded — account.funded
• Transfer Success — transfer.success
• Transfer Failed — transfer.failed
• Transfer Reversed — transfer.reversed
• Defi Payment — defi.payment
• Account Issued — account.issued
• Customer Approved — customer.approved
• Customer Rejected — customer.rejected
• Visa Gold KYC Updated — customer.visa_gold_kyc.updated
• Visa Gold KYC Approved — customer.visa_gold_kyc.approved
• Visa Gold KYC Rejected — customer.visa_gold_kyc.rejected
• Visa Gold KYC Pending — customer.visa_gold_kyc.pending
• All Visa Gold Card Events — card.visa_gold.*
• Visa Gold Card Created — card.visa_gold.created
• Visa Gold Card Active — card.visa_gold.active
• Visa Gold Card Charged — card.visa_gold.charged
• Visa Gold Card Funded — card.visa_gold.funded
• Visa Gold Card Declined — card.visa_gold.declined
• Visa Gold Card Code (3DS) — card.visa_gold.code
• Visa Gold Card Terminated — card.visa_gold.terminated
• Visa Gold Card Termination Refund — card.visa_gold.termination.refund

Visa Gold KYC

HeyQo receives Visa Gold KYC events and relays them to your webhook URL:

https://heyqo.cash/webhooks/ziiro
https://heyqo.cash/webhooks/ziiro/kyc

Outbound to your URL includes visa_gold_kyc_status, ready_for_visa_gold, failure_reason, verification_link.

{
  "event": "customer.visa_gold_kyc.rejected",
  "data": {
    "customer_id": "…",
    "visa_gold_customer_id": "01a13…",
    "visa_gold_kyc_status": "rejected",
    "ready_for_visa_gold": false,
    "failure_reason": "…",
    "verification_link": "https://…"
  }
}

Visa Gold Card events

Same inbound URL. Outbound uses the Visa Gold card namespace (and the classic card.* twin for older subscribers):

• card.visa_gold.created
• card.visa_gold.active — last4 + expiry when the card is active
• card.visa_gold.charged
• card.visa_gold.funded
• card.visa_gold.declined
• card.visa_gold.code — 3DS / OTP code
• card.visa_gold.terminated
• card.visa_gold.termination.refund

{
  "event": "card.visa_gold.active",
  "data": {
    "card_id": "…",
    "customer_id": "…",
    "visa_gold_customer_id": "01a13…",
    "brand": "visa_gold",
    "status": "active",
    "ready": true,
    "last4": "7534",
    "expiry": "06/29",
    "expiry_month": "06",
    "expiry_year": "2029",
    "balance": 3.00,
    "currency": "USD"
  }
}