What to verify
Signature validation (X-Razorpay-Signature in production), idempotency on payment.captured / payment.failed, and correct HTTP 2xx within timeout. MockCard's quick audit surfaces status codes and timing before you go live.
Combine with test cards
After webhook probes pass, generate RuPay or Visa test cards that trigger the same business logic your Razorpay flow uses.