2 min read
When it fires
mandate.activated is emitted when a direct debit / payment mandate becomes active. A redelivery of the same occurrence carries the same event id.
If your endpoint does not return a 2xx within the timeout, delivery is retried on an exponential backoff schedule — see Webhook delivery and retries. Design your handler to be idempotent so a redelivered event is safe to process twice.
Example delivery
{
"id": "evt_MAND9Z",
"type": "mandate.activated",
"created": "2026-07-05T12:00:00Z",
"livemode": true,
"api_version": "2026-07-01",
"data": {
"object": {
"id": "mnd_3C7L9",
"loan_id": "loan_2K9P4",
"scheme": "bacs",
"status": "active"
}
}
}
Handling it
A common handler will confirm the mandate is set up. Verify the signature, acknowledge with 200 within 10 seconds, then work asynchronously. Guard against out-of-order delivery using the created timestamp, and re-fetch the resource from the API if you need its live state.
Frequently asked questions
Can mandate.activated arrive out of order?
Yes. Webhook delivery is unordered — a retried event can arrive after a newer one. Reconcile with the created timestamp. See Handle out-of-order webhooks.
Should I act on mandate.activated alone?
Treat it as a nudge. For anything that changes money or state on your side, re-read the mandate from the API to confirm current state before acting.
Funding for UK limited companies
Credicorp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.