# Recipient state change

Triggered when a recipient account created or changed through hosted recipient creation changes state.
See the [Embedded Flows guide](/guides/product/embedded-flows/index.md#hosted-recipient-creation-flow) for an example recipient creation flow.
Events may not be delivered in the order they occurred. Use `data.resource.occurred_at` to reconcile the order.
See the [Event Ordering](/guides/developer/webhooks/event-ordering) guide for details.
* Event type: `recipients#state-change`
* Profile level subscriptions: Supported
* Application level subscriptions: Supported

Endpoint: POST recipients#state-change

## Header parameters:

  - `X-Signature-SHA256` (string)
    RSA-SHA256 signature of the request body, Base64 encoded. Verify this against the [Wise public key](/guides/developer/webhooks/event-handling#requests) to ensure the request is authentic and has not been tampered with.

  - `X-Delivery-Id` (string)
    Unique identifier for this webhook delivery attempt.

  - `X-Test-Notification` (boolean)
    Present with the value `true` if this is a test notification sent to verify your callback URL during subscription setup.

## Request fields (application/json):

  - `schema_version` (string, required)
    Version of the event schema. Determined by the `schema_version` on your [webhook subscription](/api-reference/webhook).
    Enum: "4.0.0"

  - `subscription_id` (string, required)
    ID of the webhook subscription that triggered this event.
    Example: ced03af9-be76-46ac-ada8-7fe935792290

  - `event_type` (string, required)
    Event type identifier.
    Enum: "recipients#state-change"

  - `sent_at` (string, required)
    Timestamp when the event was sent.
    Example: 2026-06-15T13:18:20.265Z

  - `data` (object, required)

  - `data.resource` (object, required)

  - `data.resource.id` (string, required)
    Resource identifier for the changed recipient.
    Example: 700525176

  - `data.resource.occurred_at` (string, required)
    Timestamp when the recipient state change occurred.
    Example: 2026-06-15T13:18:20.265Z

  - `data.resource.data` (object, required)

  - `data.resource.data.recipientId` (integer, required)
    Recipient account ID.
    Example: 700525176

  - `data.resource.data.profileId` (integer, required)
    Profile ID that owns the recipient.
    Example: 14966143

  - `data.resource.data.currency` (string, required)
    Recipient account currency.
    Example: EUR

  - `data.resource.data.state` (string, required)
    Recipient state that triggered the event.
    Enum: "CREATE", "UPDATE", "DEACTIVATE", "OBFUSCATE", "DELETE"

  - `data.resource.data.clientId` (string, required)
    Partner client ID associated with the recipient.
    Example: hosted-kyc-test-client

## Response 200 fields (application/json):

  - `status` (string)
    Example: ok