Configuration

Configuring Binance Pay

1. Log in to your Binance Merchant account and create an application to obtain your API Key and Secret Key.
2. Set the Callback/Webhook URL in your Binance Pay settings to your Gulf GSM Pay webhook endpoint (see below).
3. Paste the credentials into the Gulf GSM Pay admin panel → Settings → Payments (they are stored in your server environment, never in the database or code).
4. Enable the Binance Pay payment method.

Your Binance Pay webhook URL is:

https://pay.gsmcool.online/webhook/binance-pay

Configuring USDT

1. Create a USDT wallet on the TRC20 network and obtain your wallet address.
2. Enter the wallet address and network in Admin → Settings → Payments.
3. Choose your provider: Manual (confirm on-chain receipt manually) or a provider API.

Your USDT webhook URL is:

https://pay.gsmcool.online/webhook/usdt

Webhook security

• Binance Pay webhooks are verified using an HMAC-SHA512 signature over the raw body.
• Every webhook is processed idempotently — the same event is never applied twice.
• A licence is only activated after the gateway's server-side verification passes.

Testing payments

Use Binance Pay's sandbox/test mode while in development. Keep Binance Pay test mode enabled in the admin settings until you are ready to go live, then disable it and use production credentials.