Skip to main content
The Embedded Account Capture SDK fires both client-side JavaScript events (handled in your browser application) and server-side webhook events posted to your registered HTTPS endpoint. This page covers the server-side webhooks. For the client-side SDK events — TOKEN_SUCCESS, SESSION_EXPIRED, and others — see the SDK Events reference. Webhooks are delivered as JSON via HTTP POST to your registered endpoint. Return any 2xx status to acknowledge receipt. See Webhooks for endpoint requirements, IP allowlist, and retry behavior.

Event categories

CategoryWhat it covers
Recipient VerificationRVDM identity matching success and failure outcomes
OFAC ScreeningCompliance hold, clearance, and failure events
Account VerificationCard (CNS/CD, AVS/CVV), ACH (RNV, ANV, NAV), and PayPal verification outcomes
Account TokenizationSuccessful account tokenization — includes the customer_account_token
Session LifecycleSession expired and session terminated events

Event reference

All Embedded Account Capture webhook events are documented in the AsyncAPI spec. Each channel page includes the full payload schema and an example.

EAC Webhook Events

Full event catalog — payload schemas, field definitions, and examples for every server-side EAC webhook event.