PAY-001Verify a CoinPayments IPN before you credit itThe HMAC is over the raw POST body, not the parsed array. Rebuilding it from $_POST is why so many handlers reject every callback.PHPTested on PHP 8.2, MariaDB 10.6Handles money and fraud surface