Upollo Webhooks

When to Use This Skill

• How do I receive Upollo webhooks?
• How do I verify the Upollo Upollo-Signature header?
• How do I verify an Upollo HMAC-SHA512 signature over the raw body?
• How do I react to an Upollo fraud flag like ACCOUNT_SHARING or MULTIPLE_ACCOUNTS?
• How do I handle the Upollo action (CHALLENGE / DENY / PERMIT / OFFER / LOG)?
• Why is my Upollo webhook signature verification failing?

How Upollo Webhooks Work

Upollo is a fraud / risk-detection platform. Unlike most providers, Upollo webhooks are not a subscription to discrete named events. A webhook fires whenever Upollo flags a user (for example account sharing or multi-accounting). Each delivery is an analysis describing the user, the device, the recommended action, and the list of flags that were raised.