How we tamed bank callbacks in PDP
In PDP, we implemented handling of callbacks from the acquiring bank with mandatory digital signature verification so that we check the authenticity of the response before changing the payment status.
In PDP, we implemented handling of callbacks from the acquiring bank with mandatory digital signature verification. In simple terms: before changing a payment status, we verify that the response really came from the bank, not from a “very confident” external request.
Why does this matter? In a world where supply chain attacks and spoofing are no longer just cyberpunk plot points, blindly trusting a callback is a poor choice. That’s why every bank response is checked for authenticity before the status is updated.
And yes, we accounted for a real production case: the bank confirmed the transaction, but the callback never reached us. For such cases, we added the “paid with error” status — so we don’t end up with magic of the kind where “the money was debited, but the system pretends nothing happened”.
Reliability in payments is when you trust not words, but the signature. 😌