# Refund notification

> POST to your notification URL
> Sent by Ozow. Part of the Payments API reference. Source: https://hub.ozow.com/api-reference/payments-api/webhooks/refund-notification/

Sent to the notification URL given on the refund request, once the refund has either completed or failed.

Verify the `hash` field before acting on the contents. Concatenate the notification fields in the order they appear, excluding `isRtc` and `hash`, append your private key, lowercase the result, and compare a SHA512 of it against the value received.

## Authentication

Ozow sends no credential with this call, so this check is the only thing standing between a real delivery and a stranger’s. Verify the Hash field before acting on the contents: your notification URL is public, and anyone can post to it.

## Payload

**application/x-www-form-urlencoded**

- `RefundId` (string, uuid, required) - The refund identifier.
- `TransactionId` (string, uuid, required) - The transaction identifier of the transaction that is being refunded.
- `CurrencyCode` (string, required, max length 3) - The refund currency. Will always be the same as the amount in the transaction.
- `Amount` (number, double, required) - The refund amount, in the currency the currency code names. Written with two decimal places, which is the form the hash is built from.
- `IsRtc` (string, required) - An indication of whether RTC was used to pay the refund.
- `Status` (string, required, one of "Pending", "Submitted", "Complete", "Failed", "Cancelled", "Returned", "PendingInvestigation", "Invalid", "Error") - The refund status. Sent as the name, not as a number, because the notification is form encoded and the status is written out in full.
- `BankName` (string, required, max length 50) - The name of the bank the refund was paid to.
- `AccountNumber` (string, required, max length 50) - The masked account number payment was made to. The hash is built from the masked value, so hash what you received rather than the number you sent.
- `StatusMessage` (string, max length 500) - Message regarding the status of the refund. This field will not always have a value.
- `Hash` (string, required, max length 128) - SHA512 hash used to ensure that certain fields in the message have not been altered after the hash was generated.

## Your response

### 200 Acknowledged. Return this once you have stored the notification.

No body.