Calls to the webhook contain a field in the header named X-Hub-Signature, which can be used to validate that the call came from Facebook. Make sure your webhook is responding with a status code of 200. This communicates to us that the webhook was successfully received.

