Signed webhooks
Every webhook's HMAC signature is checked before anything is written.
Developers
Kalplex listens to GoCardless webhooks for every connected account, de-duplicates them, and re-reads each resource's current state before updating your records.
| Status | Meaning |
|---|---|
| pending_submission | Created and waiting to be sent to the bank |
| submitted | Sent to the payer's bank |
| confirmed | Collected; held by GoCardless before payout |
| paid_out | Paid out to your bank account |
| failed | Couldn't be collected — see the reason; can be retried |
| charged_back | The payer reclaimed it through their bank |
| cancelled | Cancelled before submission |
| Status | Meaning |
|---|---|
| pending_submission | Signed, waiting to be submitted |
| submitted | Sent to the payer's bank |
| active | Ready to collect |
| failed | The bank account can't take Direct Debits |
| cancelled | Cancelled by the payer, their bank or you |
| expired | No debit for 36 months |
Every webhook's HMAC signature is checked before anything is written.
Each event is processed once, even if GoCardless delivers it again.
Kalplex lists recent events to catch anything missed during an outage.
Account