{
"api_version": "2026-10-31",
"created": "2026-10-10T10:05:00.000Z",
"created_at": "2026-10-10T10:05:00.000Z",
"data": {
"refund": {
"amount": "5.00",
"currency": "EUR",
"errorCode": "REFUND_DECLINED",
"id": "rf_example",
"provider": "stripe",
"providerRefundId": "re_example",
"reason": "requested_by_customer",
"status": "FAILED",
"transactionId": "tr_example"
},
"transaction": {
"amount": "12.30",
"id": "tr_example",
"livemode": true,
"orderId": "order_example_001",
"refundState": "none",
"refundedAmount": "0.00"
}
},
"id": "evt_0j7s2pft4v8b9t8nj2cra1eg01",
"livemode": true,
"type": "refund.failed"
}Refund failed event
Terminal refund event sent to the original sale callbackUrl, falling back to the merchant default webhook URL. Verify HMAC-SHA256 over the exact raw body before parsing, using the merchant webhook secret (ADR-010). Reject signature timestamps beyond 300 seconds; compare in constant time. Deliveries are at least once and can arrive out of order. Deduplicate by the signed body id. Secret rotation takes effect immediately (no dual signing); failed deliveries retry for approximately 31 hours. API keys are not sent with webhooks. The refund and transaction snapshot stays byte-identical across retries/redrives; retain the maximum cumulative refundedAmount using decimal arithmetic.
{
"api_version": "2026-10-31",
"created": "2026-10-10T10:05:00.000Z",
"created_at": "2026-10-10T10:05:00.000Z",
"data": {
"refund": {
"amount": "5.00",
"currency": "EUR",
"errorCode": "REFUND_DECLINED",
"id": "rf_example",
"provider": "stripe",
"providerRefundId": "re_example",
"reason": "requested_by_customer",
"status": "FAILED",
"transactionId": "tr_example"
},
"transaction": {
"amount": "12.30",
"id": "tr_example",
"livemode": true,
"orderId": "order_example_001",
"refundState": "none",
"refundedAmount": "0.00"
}
},
"id": "evt_0j7s2pft4v8b9t8nj2cra1eg01",
"livemode": true,
"type": "refund.failed"
}Headers
t=,v1=<hex HMAC-SHA256(timestamp + "." + exact raw body)>; never log this header
^t=[0-9]+,v1=[a-f0-9]{64}$Convenience copy of body id (evt_…); deduplicate only after verifying the signed body
^evt_[0-7][0-9a-hjkmnp-tv-z]{25}$Convenience copy of body type
"refund.failed"
Body
Immutable refund terminal event. Amounts use currency precision; retain the maximum refundedAmount when events arrive out of order.
^[0-9]{4}-[0-9]{2}-[0-9]{2}$"2026-10-31"
Alias of created_at, preserved across retries.
Show child attributes
Show child attributes
^evt_[0-7][0-9a-hjkmnp-tv-z]{25}$Mode of the transaction snapshot; false for sandbox.
refund.succeeded, refund.failed Response
Any 2xx acknowledges delivery. Response body is ignored but must be empty or at most 64 KiB (MERCHANT_WEBHOOK_MAX_RESPONSE_BYTES); a larger body fails the delivery attempt. Prefer HTTP 204 No Content.