Events reference
Every event type a webhook can subscribe to.
Every delivery carries an X-SamaPrime-Signature header — t=<unix_seconds>,v1=<hex hmac> — computed as HMAC-SHA256(your webhook's secret, "{timestamp}.{raw_body}"). The timestamp is folded into the signed content itself, not just carried alongside it, so a captured signature+body pair can't be replayed under a different timestamp — verify with a timing-safe comparison and a reasonable tolerance window (e.g. 5 minutes).
The X-SamaPrime-Event header matches the payload's own "type" field, so you can route without parsing the body first.
| event | Description |
|---|---|
| order.completed | An SMS or SMM order finishes successfully. |
| order.failed | An order fails and is refunded. |
| wallet.deposited | A crypto deposit is credited to the wallet. |
| card.transaction | A spend or decline event on an issued card. |
| smm.order.completed | An SMM order finishes with full delivery. |
| smm.order.partial | An SMM order finishes with partial delivery. |