You might need to use the express.raw middleware (i.e., express.raw({type: 'application/json'}) to make sure that the body data is raw. You can find some example code in the webhook builder, and refer to this doc for more possible solutions for webhook signature verification error.