webhooks.xyz

Examples / Payments and billing / GoCardless

GoCardless webhooks

Direct debit mandates, payments, payouts and refunds across bank networks.

Events

  • payments.confirmed
  • payments.failed
  • mandates.cancelled
  • payouts.paid

Signature

Header Webhook-Signature: HMAC-SHA256 of the raw body with the webhook endpoint secret, hex encoded. One request can carry many events.

✓ A bin checks GoCardless signatures: add the webhook endpoint secret under Signature verification (GoCardless).

Check a GoCardless signature with the free tool (use the GitHub preset).

Retries

GoCardless retries for up to 36 hours with increasing gaps.

See a retry schedule in the calculator.

Docs

developer.gocardless.com/getting-started/api/staying-up-t...

Checked 2026-10-08. Report a change.

Sample request from GoCardlessillustrative, shortened
Content-Typeapplication/jsonWebhook-Signature9a3f…c7d0Originhttps://api.gocardless.com 
{
  "events": [
    {
      "id": "EV0005678ABC",
      "created_at": "2026-10-08T06:34:00.000Z",
      "resource_type": "payments",
      "action": "confirmed",
      "links": { "payment": "PM00012345ABCD" },
      "details": { "origin": "gocardless", "cause": "payment_confirmed", "description": "Payment was confirmed as collected" }
    }
  ]
}

Receive GoCardless webhooks with webhooks.xyz

Create a bin. Paste its URL into GoCardless. Each request shows at once with its headers and body. Add your secret, and each request gets a verified or failed mark. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in payments and billing: Paddle, PayPal, Razorpay, Square, Stripe.