Developer Guide: Integrating with Daffaa API, Webhooks and SDKs (PHP/Laravel, Node, Python)

Why integrate your store with Daffaa?

If you run an online store or sell SMM services and collect payments via Vodafone Cash or InstaPay, manually reading SMS to confirm each payment wastes time and causes errors. Daffaa API automates this: once a payment SMS is read and verified, Daffaa sends you an instant Webhook so you can credit the customer automatically.

Step 1: Get your API key

Create a free account, link your Vodafone Cash or InstaPay number, then grab your API Key, Store ID and Webhook Secret from the Developers section. All requests go to https://daffaa.net/api/v1 with an Authorization: Bearer header over HTTPS.

Step 2: Receive the Webhook

Instead of polling, Daffaa POSTs a payment.confirmed event to your Webhook URL containing the reference, amount, method and customer info, signed with HMAC-SHA256.

Verify the signature

• PHP/Laravel: compute hash_hmac('sha256', $raw, $secret) and compare with hash_equals(), then queue the crediting job and return 200.
• Node.js: use express.raw(), crypto.createHmac and timingSafeEqual.
• Python: use the hmac module with hmac.compare_digest on the raw body.

Step 3: Reliability

Store the reference for idempotency, handle Daffaa retries safely, log every event, and keep a polling fallback via GET /payments. SMM resellers can wire the Webhook straight to their panel's add-funds endpoint for instant auto top-up. See the setup guide or read more on the blog.

Sign up free and build your first integration today.