The authorization header must contain the same token used in the webhook registration.
{
"content-length": "234",
"user-agent": "GuzzleHttp/6.5.5 curl/7.69.1 PHP/7.4.10",
"content-type": "application/json",
"accept": "application/json",
"authorization": "Bearer my-token"
}
Upon receiving the webhook callback it has the referralId which can be tracked from the and the possible statuses are: