Go Live Checklist

Before live payments

Move to live only after sandbox tests pass and the merchant admin team can operate the dashboard confidently.

Merchant dashboard

• Merchant organization access is confirmed.
• Required merchant admins and operators can log in.
• Receiver accounts are configured for live payment methods.
• Live receiver wallet numbers are correct.
• Dashboard users know where to inspect Payment Intents, SMS Events, Reconciliation, Devices, Webhooks, and Activity Logs.

Backend integration

• Live API key is stored only on your backend.
• Backend creates payment intents with merchantReference for your order ID.
• Backend uses a stable idempotencyKey for retries.
• Backend stores SMS Pay payment intent id.
• Backend redirects customers to checkoutUrl.
• Backend does not fulfill from browser redirects.

Webhooks

• Live webhook endpoint uses HTTPS.
• Endpoint is added in Dashboard -> Webhooks.
• Endpoint is subscribed to the needed events.
• Endpoint is verified.
• Test event is delivered successfully.
• Signature verification uses the raw request body.
• Fulfillment happens only for payment.paid.
• Duplicate webhook deliveries are safely ignored.

Android device

• SMS Pay Android app is installed from the official downloads page.
• App is installed on the phone receiving live wallet SMS messages.
• SMS permission is granted.
• Battery/background restrictions are handled.
• Device is linked to the live merchant environment.
• Device appears online in Dashboard -> Devices.

Live smoke test

Run a small live payment before opening full traffic:

1. Create a live payment intent from your backend.
2. Open hosted checkout.
3. Pay the exact amount to the displayed receiver.
4. Confirm the Android app forwards the SMS.
5. Confirm Payment Intent becomes PAID.
6. Confirm your backend receives payment.paid.
7. Confirm your order is fulfilled once.

Rollback plan

If live testing fails:

• stop new checkout creation from your backend
• inspect webhook delivery and SMS event details
• keep received SMS evidence for review
• create a new payment intent for customer retry when needed
• switch back to sandbox for reproduction if the issue is integration logic

Launch complete

Launch is complete when live payment, webhook fulfillment, dashboard investigation, and Android device monitoring all work end to end.