Add an endpoint
Open Publisher Postbacks and create a GET, form POST, or JSON callback. For supported reward-site scripts, use Postback Integration Presets so Offerwall Ad builds the callback variables automatically.
Shared callback password
Enable the shared callback password and choose the field name your receiver expects, such as password, secret, token, or api_key. Offerwall Ad encrypts the password at rest and sends it with every callback. GET callbacks receive it in the query string, form POST callbacks receive it in the request body, and JSON callbacks receive it as a JSON field.
HMAC signing
Shared passwords work alongside the X-Offerwall-Ad-Signature, event ID, and event-name headers. Validate both when your receiving script supports HMAC.
Test before live traffic
Use Publisher Postback Tester to simulate approved, held, released, reversed, and rejected conversions without creating earnings or spending campaign budget.
Idempotency
Store the transaction or event ID after crediting a user so retries cannot create duplicate rewards.