The verdict in three sentences
A merchant who confirms payments by polling (querying status every 30 to 60 seconds) ships late and sometimes double-counts sales. The signed, idempotent webhook with retry confirms in under 5 seconds and pulls the missed-confirmation rate from 1-3 % to under 0.1 %. Three bricks are non-negotiable in 2026: HMAC signature verification, idempotency (each event handled once), and a queue with exponential back-off.
Polling vs webhook: the difference shows up in the till
Polling means asking the operator in a loop whether the payment went through. The webhook receives a pushed notification the moment status changes. The first is simple but slow and call-heavy; the second is fast but demands serious hardening.
| Criterion | Status polling | Signed webhook + retry |
|---|---|---|
| Confirmation delay | 30 to 60 s | < 5 s |
| Missed-confirmation rate | 1 to 3 % | < 0.1 % |
| Server load | High (repeated calls) | Low (pushed) |
| Double-counting risk | Medium | None if idempotent |
| Security | On caller side | HMAC signature required |
| Robust integration cost | KES 45,000-120,000 | KES 90,000-240,000 |
The extra cost of a robust webhook (300,000 to 800,000 FCFA) is justified past a few dozen orders a day: a single order shipped unpaid can cost more than the integration difference.
The three bricks of a reliable webhook
A webhook is only reliable if it survives replays, duplicates, and network failures. Here are the mechanisms to implement and the measurable effect of each. The MTN MoMo API in Ghana offers a callback plus a status query endpoint, with a free sandbox to build against before go-live.
| Mechanism | Role | 2026 effect |
|---|---|---|
| HMAC signature | Verify origin | Blocks fake callbacks |
| Idempotency (event key) | Handle once | Zero double-counting |
| Queue | Absorb spikes | No loss under load |
| Exponential back-off retry | Replay failures | Misses < 0.1 % |
| Logging | Audit / replay | Traceable disputes |
| Status query endpoint | Safety net | Reconciles rare misses |
The exponential back-off replays a missed webhook after 1 s, 2 s, 4 s, 8 s... up to a cap, giving a briefly unavailable server time to recover without hammering the infrastructure.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Mini case study
Kwame runs an online shop in Accra handling 90 orders a day. With polling, roughly 2 % of confirmations arrived late or missing, i.e. 1 to 2 orders a day shipped without payment certainty, at an average basket of GHS 240.
Over a month that is about 45 at-risk orders, some GHS 10,800 of uncertain flow. After moving to a signed webhook with retry (GHS 8,000 integration), misses fall below 0.1 %, under one order a month. The integration pays for itself in under a month on avoided losses alone.
FAQ
Why not just use polling? Polling confirms in 30 to 60 seconds and misses 1 to 3 % of payments during outages. The webhook confirms in under 5 seconds with a miss rate below 0.1 %.
What is idempotency concretely? It means handling each event exactly once via a unique key: even if the operator sends the same callback twice, the sale is counted once, eliminating double-counting.
Is the HMAC signature mandatory? Yes. Without signature verification, anyone can send a fake payment callback and trigger a shipment. The HMAC signature is the first line of defense.
How long does merchant KYC take? With most mobile money operators, MTN MoMo included, merchant activation takes 3 to 7 days. The test sandbox is generally free and available immediately to build before activation.
What about the rare webhooks still missed? Keep a status query endpoint as a safety net: a periodic job checks the status of pending orders and reconciles the rare lost events, holding the final rate under 0.1 %.
Let's talk about your project. We set up your signed, idempotent mobile money webhooks with retry so you never ship an unpaid order again. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
