> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gnosispay.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Card transaction refund

> Gnosis Pay sends this event when an authorization of a refund to the card is successful.



## OpenAPI

````yaml https://core.sandbox.gnosispay.in/docs/webhooks/openapi.json webhook card.transaction.refund
openapi: 3.1.0
info:
  title: Gnosis Pay Webhooks
  version: 1.0.0
  description: |-
    Gnosis Pay sends these events to the webhook endpoint of a partner. To
    register the endpoint, use `POST /v1/webhooks` of the Partner API.

    Each delivery is an HTTP `POST` request with a JSON body. The body is an
    envelope with four fields: the event `id`, the event `type`, the time of the
    event (`createdAt`), and the event `data`.

    Verify each delivery before you process it:

    1. Join the `X-Webhook-Timestamp` header, a `.` character, and the raw
       request body. This text is the signed payload.
    2. Decode the `X-Webhook-Signature` header from Base64.
    3. Verify the signature against the signed payload. Use the Ed25519 public
       key of the webhook configuration.

    Reject a delivery when its timestamp is outside the tolerance of your
    application. This check limits replay attacks. Process the raw request body
    only after the signature and timestamp checks succeed.

    To acknowledge a delivery, return a `2xx` status within 30 seconds. Gnosis
    Pay can retry a standard event after a network error, a timeout, or a `5xx`
    response. A standard event has at most five delivery attempts. A `4xx`
    response is permanent for a standard event. A time-sensitive 3DS event can
    retry a `408` or `429` response while its delivery deadline permits it.

    The same event can arrive more than one time, and events can arrive out of
    order. Use the event `id` to process each event only one time. Use
    `createdAt` when the order of events is important.
servers: []
security: []
tags:
  - name: Accounts
  - name: KYC
  - name: Cards
  - name: Card Transactions
  - name: 3DS
  - name: Movements
paths: {}

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.