# Customer denied

Fires when the customer is permanently blocked (fraud, closed company at
Receita Federal, or other terminal condition). This is a terminal state —
the customer cannot proceed. Includes the customer ID and `denied` status.

Endpoint: POST customer.denied
Version: 2026-03-01
Security: webhookSignature

## Security:

  - `webhookSignature` (unknown)
    apiKey in header webhook-signature

## Header parameters:

  - `webhook-id` (string, required)
    Unique delivery ID. Use as idempotency key to deduplicate events

  - `webhook-timestamp` (integer, required)
    Unix timestamp of the delivery attempt. Reject if older than 5 minutes (replay protection)

  - `webhook-signature` (string, required)
    HMAC-SHA256 signature(s) for verification per Standard Webhooks spec

## Request fields (application/json):

  - `id` (string, required)
    Unique webhook event identifier
    Example: evt_550e8400e29b41d4a716446655440000

  - `type` (string, required)
    Event type
    Enum: "customer.denied"

  - `api_version` (string, required)
    API version used to generate this event
    Example: 2026-03-01

  - `created_at` (integer, required)
    When the event was created (Unix epoch seconds)

  - `delivery_id` (string, required)
    Unique delivery attempt identifier

  - `timestamp` (integer, required)
    When the event occurred (Unix epoch seconds)

  - `data` (object)
    Denied customer data

  - `data.id` (string, required)
    Unique customer identifier
    Example: cust_550e8400e29b41d4a716446655440000

  - `data.external_id` (string | null, required)

  - `data.name` (string, required)

  - `data.email` (string, required)

  - `data.phone` (string, required)

  - `data.cpf` (string, required)

  - `data.cnpj` (string | null)

  - `data.status` (string, required)
    Enum: "denied"

## Response 200:

  - `200` (unknown)
    Delivery confirmed

## Response 410:

  - `410` (unknown)
    Endpoint permanently disabled

## Response 429:

  - `429` (unknown)
    Rate-limiting, send rate reduced

## Response 502:

  - `502` (unknown)
    Server overload, rate reduced before retrying

## Response 504:

  - `504` (unknown)
    Gateway timeout, rate reduced before retrying

## Response 4XX:

  - `4XX` (unknown)
    Client error, failure triggers retry

## Response 5XX:

  - `5XX` (unknown)
    Server error, failure triggers retry