Skip to main content
The authoritative answer to “did this order get paid?”. Call it from your backend with your secret key before you release goods, credit an account, or mark an order complete.

Endpoint

Authentication

Authenticate with your secret key in the api-key header — not your public key.
Your secret key must never reach the browser. This endpoint exists precisely so that confirmation happens somewhere the customer cannot influence.

Request body

Plain JSON — this endpoint is not encrypted.

Request example

Response

Returns the order’s settled state, in the same shape as Get order status.

What to check before fulfilling

1

The status is final and successful

isFinalStatus is true and orderSummary.status is Successful.
2

The amount matches

totalChargedAmount is at least what you expected for this order. This protects you if a reference is ever replayed or tampered with.
3

You haven't already fulfilled it

Record fulfilment against the reference and make repeat verifications no-ops — you will see the same successful response more than once.
Verify against the reference you stored for the order, not one taken from a callback query string. A reference supplied by the browser is attacker-controlled until you’ve matched it to one of your own orders.

Common errors

Verify or status?

Callbacks and verification

The full server-side verification flow, with a worked example.