Skip to content

RFI Webhooks

RFI webhooks notify you when Glomo raises a Request for Information (RFI) against one of your resources, and as it moves through review. They fire for every RFI, whatever it was raised against: a payment, payin, payout, subscription, chargeback, KYC record or KYB journey. data has the same shape as the Fetch an RFI API response, so the RFI id you need for the Respond to an RFI API is data.id.

Note: The sample payloads on this page are pretty-printed. The body Glomo sends is the RFC 8785 canonical form of the same object, and the X-Glomopay-Signature header is computed over those bytes. See Webhook Authentication & Security.

Payment compliance_* events (see Payment Webhooks) still fire for screened payments, independently of these.

Event TypeDescription
action_required An RFI has been raised. Submit what documents_required and fields_required ask for.
under_review The requested information has been submitted and is being reviewed.
approved The RFI has been approved.
rejected The RFI has been rejected.

Sample Payload

{
  "entity_type": "rfi",
  "event_type": "action_required",
  "data": {
    "id": "rfi_6a7c5018ZGuKP",
    "business_id": "merch_685bb99eFhPGA",
    "entity_type": "Payout",
    "entity_id": "payout_9z8y7x6w5v",
    "status": "action_required",
    "created_at": "2026-08-12T10:51:04.747Z",
    "updated_at": "2026-08-12T10:51:04.747Z",
    "documents_required": [
      {
        "rfi_doc_id": "rfidoc_6a72a39b38jDD",
        "description": "Invoice",
        "multiple_allowed": false,
        "max_count": 1
      }
    ],
    "fields_required": [],
    "instructions": "Please upload the requested documents to resolve this request.",
    "review_comments": null,
    "uploader_comments": null
  }
}
FieldDescription
idRFI identifier, starting with rfi_. Use it with the Respond to an RFI API.
business_idIdentifier of the merchant the RFI belongs to.
entity_typeType of resource the RFI was raised against, capitalised: for example Payment, Payin, Payout, Subscription, Chargeback, KycRecord or KybVerificationJourney.
entity_idIdentifier of that resource, for example the payout ID.
statusCurrent RFI status: action_required, under_review, approved, rejected, superseded, expired or cancelled.
created_atWhen the RFI was raised, in ISO 8601 format (UTC).
updated_atWhen the RFI last changed, in ISO 8601 format (UTC).
documents_requiredDocuments to submit, each with rfi_doc_id, description, multiple_allowed and max_count. Empty array when no documents are needed.
fields_requiredStructured values to submit, each with name, type (string, integer, hash, date or enum) and required. date fields add format; enum fields add allowed_values. Empty array when none.
instructionsWhat the reviewer is asking for, or a generic message if they didn't write one.
review_commentsThe reviewer's comments. null if none.
uploader_commentsComments you sent with your response. null if none.