Attach each invoice to an order
Keep your invoice ID and store order reference. This prevents mixing payments between customers.
Check the event
Verify Webhook’s signature and match the amount, currency, and order, and then store the event before acknowledging its receipt.
Delivered once
Use a unique event identifier constraint, and do not repeat crediting or delivering the product when the notification is re-delivered.