Testing

Run through this checklist before promoting your integration from sandbox to production.

Checklist

• Card issuance — at the minimum, maximum, and a typical amount.
• Funding & withdrawal — confirm wallet and card balance both update.
• Transaction listing — verify pagination across multiple pages.
• Webhook signature verification — including the negative case (mutated body should reject).
• Error handling — exercise 400, 401, 403, 404, 409, 429, 500 for each endpoint your client calls.
• Rate limit handling — your client should back off, not crash, on 429.
• Network timeout — verify your retry path with the same nonce.
• Invalid request handling — missing fields, wrong types, out-of-range values.
• KYC flow — both APPROVED and REJECTED outcomes if you use KYC.
• Card freeze / unfreeze — verify subsequent transactions reflect the new state.
• Card deletion — verify the refund webhook fires.
• Out-of-order webhook delivery — your handler should not assume PENDING arrives before COMPLETE.

Recommended chaos cases

• Replay the same webhook twice — your handler should de-duplicate on eventId.
• Send a webhook with a deliberately wrong signature — you should reject before parsing.
• Pause your endpoint for 2 hours mid-test — verify all events arrive once the endpoint returns.
• Issue a card immediately followed by DELETE — your ledger should reflect a no-op net of the refund.