Examples / Identity and security / Plaid

Plaid webhooks

Bank link updates, new transactions, auth, identity verification and transfer events.

Events

TRANSACTIONS: SYNC_UPDATES_AVAILABLE
ITEM: ERROR
AUTH: AUTOMATICALLY_VERIFIED
TRANSFER: TRANSFER_EVENTS_UPDATE

Signature

Header Plaid-Verification is a JWT (ES256). Fetch the key by kid from /webhook_verification_key/get, verify the JWT, and compare its request_body_sha256 with the SHA-256 of the raw body.

✓ A bin checks Plaid signatures: add the client_id:secret (add :sandbox for the sandbox environment) under Signature verification (Plaid).

Retries

Plaid retries a few times with backoff for a limited time.

See a retry schedule in the calculator.

Docs

plaid.com/docs/api/webhooks/webhook-verification/

Checked 2026-10-08. Report a change.

Sample request from Plaidillustrative, shortened

Content-Typeapplication/jsonPlaid-VerificationeyJhbGciOiJFUzI1NiIsImtpZCI6…

{
  "webhook_type": "TRANSACTIONS",
  "webhook_code": "SYNC_UPDATES_AVAILABLE",
  "item_id": "wz666MBjYWTp2PDzzggYhM6oWWmBb",
  "initial_update_complete": true,
  "historical_update_complete": false,
  "environment": "sandbox"
}

Receive Plaid webhooks with webhooks.xyz

Create a bin. Paste its URL into Plaid. Each request shows at once with its headers and body. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in identity and security: Auth0 Log Streams, Clerk, Okta Event Hooks.