Examples / Payments and billing / Square

Square webhooks

Payments, refunds, orders, inventory and bookings for in-person and online sales.

Events

payment.updated
refund.created
order.fulfillment.updated
inventory.count.updated

Signature

Header x-square-hmacsha256-signature: HMAC-SHA256 of '<notification URL><raw body>' with the signature key, base64 encoded.

✓ A bin checks Square signatures: add the webhook signature key under Signature verification (Square).

Retries

Square retries with increasing gaps for up to 72 hours.

See a retry schedule in the calculator.

Docs

developer.squareup.com/docs/webhooks/overview

Checked 2026-10-08. Report a change.

Sample request from Squareillustrative, shortened

Content-Typeapplication/jsonx-square-hmacsha256-signatureXWmrwMey6OsLMeiZKwP4Fpp…square-environmentSandbox

{
  "merchant_id": "6SSW7HV8K2ST5",
  "type": "payment.updated",
  "event_id": "6a8f5f28-54a1-4eb0-a98a-3111513fd4fc",
  "created_at": "2026-10-08T06:34:00Z",
  "data": {
    "type": "payment",
    "id": "KkAkhdMsgzn59SM8A89WgKwekxLZY",
    "object": { "payment": { "amount_money": { "amount": 1800, "currency": "USD" }, "status": "COMPLETED" } }
  }
}

Receive Square webhooks with webhooks.xyz

Create a bin. Paste its URL into Square. Each request shows at once with its headers and body. Add your server as a destination, and deliveries retry when it is down. Request an invite.

More in payments and billing: GoCardless, Paddle, PayPal, Razorpay, Stripe.