- Create orders on your server, never in the browser, so keys stay secret.
- Use your own order id and treat it as unique.
- Fulfil on the webhook, verified by signature, not on the return page.
- Handle every status: pending, success, failed, expired, refunded.
- Test in staging with test keys, including failures.
- Plan refunds and who may issue them.
- Log and reconcile daily against the provider’s settlement report.
UPIPayments’ REST API and webhooks are designed around this checklist. Need it built into your app? Pepplo Web Technologies can help.
0 comments