Verify the gateway’s response, not the string it hands you
Payment gateways sign their callbacks. Validate against the concatenation the gateway supplies and you have written a function that always returns true.
Describe the symptom. I will tell you what it usually means.
Every enquiry gets a reply within one working day.