External system can handle the event notifications from SOFI. SOFI sends the event notifications as XML-document via HTTPS-request (method POST).

At the moment SOFI can send notifications about following events:

• payment operation fraud-status has been changed;
• merchant profile was automatically created in SOFI.

Notification XML-document for fraud-status change event has the following form:

<message>
      <authorization>
             <login>
                 outlogin  
             </login>
             <password>
                  outpassword  
             </password>
        </authorization >
        <event type="AFS_CHANGED">
              <payment>
                  <id>
             Payment id
           <id>
                   <fstatus>
                      Fraud-status code (see  Table 4.1)
            </fstatus >
                   <reason>
                       Fraud-status setting reason code (see table 4.2)
                   </reason>
              < /payment>
         </event>
<message>

Notification XML-document for merchant auto-creation event has the following form:

<message>
      <authorization>
             <login>
                 outlogin  
             </login>
             <password>
                  outpassword  
             </password>
      </authorization >
        <event type="MERCHANT_AUTO_CREATE">
              <merchant>
                  <id>
                    Merchant ID
                  <id>
                  <paymentId>
                    Payment ID which was used for auto-creation
                  </paymentId>
              </merchant>
         </event>
<message>

The document can contain several fraud-statuses or auto-created merchants. Tag <event> contain the corresponding number of tags <payment> or <merchant>.in such cases.

Examples (XML – example of documents and DTD – file for XML creation) can be received by following addresses:

https://afs-api.paysecure.ru/doc/event.xml

https://afs-api.paysecure.ru/doc/notification.dtd

The external system may implement services to receive information about events in the SOFI for asynchronous analysis of payment check results (see p. 5.1) and/or to transfer the specifying data (see p. 5.4). To do this, the external system has to use a web-server that receives HTTPS-requests from SOFI. The body of any request is a XML-document with information about the event in the SOFI. The external system Web-service must retrieve data from the XML in accordance with the structure description in the DTD and perform the necessary actions.