InterviewSam
Log inStart free
Interview questions
Security, auth & multi-tenancyMediumSDE-2

Your payment platform sends webhooks to merchants when a payment succeeds. A merchant was tricked by a fake 'payment.captured' request and shipped goods. How should webhooks be secured on both sides?

Asked at
PaytmRazorpayStripe

Think first

Answer out loud as you would in the room — clarify, give numbers, name the trade-off — then compare with the model answer.

Go deeper

Design an outgoing webhook delivery service Lesson: Webhooks: sending and receiving reliably

Saved on this device. Create a free account to keep it on every device.

Practise this with Sam

A real mock interview, out loud, with an honest scorecard. Free to start.

Start free