Changelog
HomeGuidesAPI ReferenceChangelog
Back to All
Added

API Update - July 2026

9 days ago by Raushan Singh

We've added some new features like Direct Debit support and HMAC signatures on webhooks. See below for more details.

New Feature: Direct Debit Support


StoneX Payments APIs now support Direct Debit as a payment method. This is currently available for USD with plans to support other currencies soon. This enhancement provides an additional funding and collection option for clients processing USD payments.

Impact:

  • New payment method available for eligible clients.
  • Requires client onboarding and configuration before use.
  • No changes required to existing payment workflows for clients not using Direct Debit.

New Feature: HMAC Signatures for Webhooks


To enhance webhook security, StoneX Payments APIs now support HMAC signature authentication on outbound webhook notifications.

When enabled, webhook payloads are signed using a shared secret, allowing clients to verify that notifications originated from StoneX and have not been tampered with in transit.

You can find more details here .

Benefits:

  • Improved webhook authentication and integrity verification.
  • Enhanced protection against spoofed webhook events.
  • Optional security control that can be enabled as part of client configuration.

Impact:

  • Clients wishing to use HMAC validation will need to configure a shared secret and implement signature verification within their webhook endpoints. Please contact our product team if you'd like to enable this.

Currency Rule Update: UGX POP Code Now Mandatory


The currency validation rules for Ugandan Shilling (UGX) payments have been updated.

The Purpose of Payment (POP) Code is now a mandatory field for UGX payment instructions. Payment requests submitted without a valid POP Code will fail validation.


Impact:

  • A valid UGX POP Code must be provided when submitting UGX payment instructions.
  • Clients should review their payment workflows and ensure the required field is populated before submission.
  • Validation API responses will identify missing or invalid POP Code information.

Action Required:

  • Clients processing UGX payments should update their integrations and operational procedures to ensure POP Codes are supplied for all applicable transactions.