Checkout event
Webhook sent when a hosted checkout completes, needs manual review, or is rejected
Authorizations
HMAC-SHA256 signature of the raw JSON body. Format: sha256=<hex>.
When you configure a webhook signing secret in account settings, HG.Cash includes
this header on every webhook POST. Verify the signature in your endpoint to ensure the request is authentic.
Body
Payload sent when a hosted checkout session changes state.
On checkout.completed, when a ledger transaction is linked, includes a nested transaction object with the same fields as Account movement webhooks, excluding topic and eventType.
Webhook topic for routing
CHECKOUT "CHECKOUT"
Event kind (matches event)
checkout.completed, checkout.awaiting_manual_review, checkout.rejected "checkout.completed"
Checkout session ID
Checkout status after the event
checkout.completed, checkout.awaiting_manual_review, checkout.rejected Decimal amount as string
ISO 4217 currency code
AR, BR, CL, BO Linked inbound transaction when available
Present on checkout.completed when a ledger transaction is linked. Omitted when no transaction is linked.
Opaque metadata from checkout create

