April 2025 - Product enhancement
Product | Summary |
---|---|
Digital Acceptance | Webhook subscription Marketplace scheme compliance Mastercard enhancements |
Digital Acceptance
Enhanced webhook subscriptions
You can now configure multiple webhook subscriptions, providing greater flexibility. Previously, configurations were limited to one webhook endpoint.
Note: The migration from the previous webhook configuration to the new multi-subscription model will be handled seamlessly by Wpay in the background. No action is required for existing webhook configurations.
Webhook signature verification
You now have the ability to verify the authenticity and integrity of incoming webhook notifications using signatures generated with your client secret. This security measure protects your endpoints from replay attacks and potentially malicious payloads sent by third parties.
Refer to our Webhook Signatures guide for implementation steps, secret management, signature verification logic, and key rotation best practices.
Note: Signature verification support have been added to the Python SDK. Support for other SDKs is planned and will be announced upon release.
Marketplace scheme compliance
To comply with the Visa Marketplace program requirements, Marketplaces must report their foreign seller transactions. We have updated the Transaction API to support this requirement. You can now set the cart_items.seller_country
field to indicate the seller's country. If the value of cart_items.seller_country
differs from the transaction-level country
, the transaction will be reported to Visa as foreign seller transaction to fulfil Marketplace obligations.
Mastercard - Merchant Advice Codes (MAC)
Our API response for Mastercard transactions now includes Merchant Advice Codes (MAC). Introduced by Mastercard, these codes provide additional insights into declined transactions, helping merchants better understand the reason for the decline and the recommended next steps. MACs offer guidance on the cause of the payment failure, indicate whether a transaction can be retried, and, in some cases, suggest a recommended waiting period before retrying.
The list of MACs is provided below:
Merchant Advice Code | Description |
---|---|
01 | New account information available |
02 | Cannot approve at this time, try again later |
03 | Do not try again |
04 | Token requirements not fulfilled for this token type |
05 | Negotiated value not approved |
21 | Payment cancellation (Mastercard use only) |
22 | Merchant does not qualify for product code |
24 | Retry after 1 hour (Mastercard use only) |
25 | Retry after 24 hours (Mastercard use only) |
26 | Retry after 2 days (Mastercard use only) |
27 | Retry after 4 days (Mastercard use only) |
28 | Retry after 6 days (Mastercard use only) |
29 | Retry after 8 days (Mastercard use only) |
30 | Retry after 10 days (Mastercard use only) |
40 | Consumer non-reloadable prepaid card |
42 | Sanctions Scoring Service: Score Exceeds Applicable Threshold Value |
43 | Consumer multi-use virtual card number |