3. Handle the mandate callback

Paga sends this to your server. You don’t call it; build an endpoint at your callback URL that accepts it.

Sent when the authorisation transfer arrives (VERIFIED) and when the bank approves the mandate (APPROVED). Both set-up methods send the same callbacks.

Hash: statusCode + timeStamp + accountNumber + bankName + referenceNumber + mandateStatus + hashKey, using each value exactly as received.