You can verify webhook notifications. https://developer.paypal.com/docs/api-basics/notifications/webhooks/notification-messages/#event-headers "Event headers for notification messages contain the PayPal-generated asymmetric signature and information that you can use to validate the signature" https://developer.paypal.com/docs/api/webhooks/v1/#verify-webhook-signature
... View more