## How it works

The gateway's webhook receiver verifies the SpicePay signature before changing an order. Use the plugin's extension hooks for store-specific automation rather than modifying its core files.

## Implementation

The gateway endpoint and hook names must match the installed SpicePay release. Inspect the plugin's settings or source for its registered receiver; the standalone receiver uses /wp-json/spicepay/v1/webhook. Keep the route reachable over HTTPS and excluded from caching. Logs are available in WooCommerce → Status → Logs, source spicepay. Redact secrets and buyer data when sharing diagnostics.

## In this area

- Webhook endpoint
- Hooks
- Logs

## Related guides

- [Webhook events](/docs/payment-api/webhooks/)