{
"account_id": "ae8cf540-1234-5678-9abc-def012345678",
"review_id": "7a3f2b1c-0000-4000-8000-000000000001",
"kind": "payout",
"resource_id": "8b4c3d2e-1111-4111-8111-111111111111",
"status": "released",
"previous_status": "in_review",
"amount": "1500.00",
"asset": "USD"
}Transaction review status changed
A transaction of the account changed its review status (in_review when the transactional firewall holds it, info_requested, released, rejected).
The payload is deliberately neutral: status and operation summary only — internal review reasons or compliance notes are never included. A rejected status can also come from the organization’s review deadline sweep (automatic rejection); the email and the review detail carry the standard deadline notice.
Every delivery includes X-Webhook-Event, X-Webhook-Event-ID, X-Webhook-Delivery-ID, X-Webhook-Timestamp and X-Webhook-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Respond 2xx; up to 5 attempts with incremental backoff.
{
"account_id": "ae8cf540-1234-5678-9abc-def012345678",
"review_id": "7a3f2b1c-0000-4000-8000-000000000001",
"kind": "payout",
"resource_id": "8b4c3d2e-1111-4111-8111-111111111111",
"status": "released",
"previous_status": "in_review",
"amount": "1500.00",
"asset": "USD"
}Authorizations
Session JWT (from register/login) or API key (pk_...).
X-API-Key: <token> is accepted as an alternative header.
Body
Response
Return any 2xx to acknowledge the delivery.