Airwallex success redirect is not proof of payment: verify server-side

TL;DR

Do not mark an Airwallex order paid on the successUrl redirect. The redirect fires before the intent settles, so verify server-side: poll the Retrieve PaymentIntent API until it reaches a final status, or react to the payment_intent.succeeded webhook.

Steps

1. Do not mark an Airwallex order paid on the successUrl redirect. The redirect fires before the intent settles, so verify server-side: poll the Retrieve PaymentIntent API until it reaches a final status, or react to the payment_intent.succeeded webhook. Treat the webhook as the source of truth and the redirect as a hint.

When to use

You are seeing this: Do not mark an Airwallex order paid on the successUrl redirect. Use this skill when you run into "Airwallex success redirect is not proof of payment: verify server-side".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Source: Airwallex's official Hosted Payment Page scenarios (airwallex/airwallex-marketplace): after a successful payment the shopper is redirected to successUrl with the PaymentIntent id as a query param, but right after the redirect the intent is often still PROCESSING, for example just after a 3DS challenge. The guidance is explicit: never trust the client-side redirect alone; the payment_intent.succeeded webhook or the Retrieve PaymentIntent API is the authoritative signal.

Verified resolution: Do not mark an Airwallex order paid on the successUrl redirect. The redirect fires before the intent settles, so verify server-side: poll the Retrieve PaymentIntent API until it reaches a final status, or react to the payment_intent.succeeded webhook. Treat the webhook as the source of truth and the redirect as a hint.

Source URL: https://github.com/airwallex/airwallex-marketplace/blob/HEAD/plugins/airwallex-dev/skills/airwallex-hpp/references/scenarios.md