inside your verify csrf middleware add the url you want webhook to hit protected $except = [ .... .... '*/payu/payment/status' ];