Treezor Webhooks

When to Use This Skill

• How do I receive Treezor webhooks?
• How do I verify the Treezor object_payload_signature?
• Why is my Treezor webhook signature verification failing?
• How do I handle Treezor events like payin.create, cardtransaction.create, or user.kycreview?
• How do I subscribe to Treezor webhooks via the API?

Verification (core)

Treezor uses a custom HMAC-SHA256 scheme — not Standard Webhooks — and the signature is a field inside the JSON body, not an HTTP header. Webhooks arrive with a text/plain MIME type, so parse the body yourself.