Disbursement Webhooks

Disbursement webhooks notify your system when a disbursement transfer succeeds or fails. The disbursement is initiated through the QFAST dashboard — your system only needs to listen for these events.

Configure your webhook URL in QFAST's lender settings.

Webhook Security

Every request includes an HMAC-SHA256 signature. Verify it before processing. See Authentication for credential setup and the Onboarding Webhooks for a verification code example.

Header	Value
`Signature`	HMAC-SHA256 of the raw JSON body, using your `webhook_secret`.

Event: `disbursement.succeeded`

Fired when funds are successfully transferred to the borrower's DOKU wallet. At this point, the loan transitions to ACTIVE.

Headers

Header	Value
`Content-Type`	`application/json`
`Event`	`disbursement.succeeded`
`Signature`	HMAC-SHA256 of the body.

Payload Structure

Field	Type	Description
`event`	String	Always `disbursement.succeeded`.
`timestamp`	String	Event time in `YYYY-MM-DD HH:MM:SS` (UTC).
`data.disbursement_id`	UUID	Disbursement identifier.
`data.loan_id`	UUID	Associated loan identifier.
`data.reference_account_number`	String	Your reference number for this loan.
`data.amount`	Number	Amount transferred to borrower's wallet, in IDR.
`data.disbursed_at`	DateTime\|null	Date and time in `Y-m-d H:i:s` (UTC).
`data.reference_id`	String\|null	DOKU internal transfer reference number.

Example

{
  "event": "disbursement.succeeded",
  "timestamp": "2026-05-11 12:00:00",
  "data": {
    "disbursement_id": "d1e2f3a4-b5c6-7890-def0-123456789abc",
    "loan_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "reference_account_number": "LND-ACC-2026-0001",
    "amount": 4950000.0,
    "disbursed_at": "2026-05-11 12:00:00",
    "reference_id": "DOKU-TRF-20260511-XYZ123"
  }
}

Event: `disbursement.failed`

Fired when the transfer to the borrower's DOKU wallet fails.

Headers

Header	Value
`Content-Type`	`application/json`
`Event`	`disbursement.failed`
`Signature`	HMAC-SHA256 of the body.

Payload Structure

Field	Type	Description
`event`	String	Always `disbursement.failed`.
`timestamp`	String	Event time in `YYYY-MM-DD HH:MM:SS` (UTC).
`data.disbursement_id`	UUID	Disbursement identifier.
`data.loan_id`	UUID	Associated loan identifier.
`data.reference_account_number`	String	Your reference number for this loan.
`data.amount`	Number	Amount that was attempted, in IDR.
`data.reason`	String	Failure reason (e.g. insufficient balance, etc.).
`data.failed_at`	DateTime\|null	Date and time in `Y-m-d H:i:s` (UTC).

Example

{
  "event": "disbursement.failed",
  "timestamp": "2026-05-11 12:00:00",
  "data": {
    "disbursement_id": "d1e2f3a4-b5c6-7890-def0-123456789abc",
    "loan_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
    "reference_account_number": "LND-ACC-2026-0001",
    "amount": 4950000.0,
    "reason": "Insufficient escrow balance",
    "failed_at": "2026-05-11 12:00:00"
  }
}

Webhook Security#

Event: disbursement.succeeded#

Headers#

Payload Structure#

Example#

Event: disbursement.failed#

Headers#

Payload Structure#

Example#

Webhook Security

Event: `disbursement.succeeded`

Headers

Payload Structure

Example

Event: `disbursement.failed`

Headers

Payload Structure

Example