AutomationFlowsEmail & Gmail › Security Scanner - Payment Notification

Security Scanner - Payment Notification

Security Scanner - Payment Notification. Uses httpRequest, telegram, googleSheets, emailReadImap. Manual trigger; 5 nodes.

Manual trigger★★★★☆ complexity5 nodesHTTP RequestTelegramGoogle SheetsEmail Read Imap
Email & Gmail Trigger: Manual Nodes: 5 Complexity: ★★★★☆ Added:

This workflow follows the Emailreadimap → HTTP Request recipe pattern — see all workflows that pair these two integrations.

The workflow JSON

Copy or download the full n8n JSON below. Paste it into a new n8n workflow, add your credentials, activate. Full import guide →

Download .json
{
  "meta": {
    "created": "2026-02-13T06:51:00Z",
    "version": "1.0"
  },
  "name": "Security Scanner - Payment Notification",
  "description": "Wise \u6536\u6b3e\u901a\u77e5\u8207\u5ba2\u6236\u7ba1\u7406\u81ea\u52d5\u5316",
  "active": false,
  "nodes": [
    {
      "parameters": {
        "method": "POST",
        "url": "={{ $env.WISE_WEBHOOK_URL }}",
        "sendHeaders": true,
        "headerParameters": {
          "parameters": [
            {
              "name": "Content-Type",
              "value": "application/json"
            }
          ]
        },
        "sendBody": true,
        "specifyBody": "json",
        "jsonBody": "={}",
        "options": {}
      },
      "id": "node_webhook",
      "name": "Wise Webhook",
      "type": "n8n-nodes-base.httpRequest",
      "typeVersion": 4.1,
      "position": [
        100,
        200
      ]
    },
    {
      "parameters": {
        "chatId": "1408472778",
        "text": "={{ '\ud83d\udcb0 \u3010\u6536\u6b3e\u901a\u77e5\u3011\\n\\n\ud83d\udcb5 \u91d1\u984d: ' + $json.amount + ' ' + $json.currency + '\\n\ud83d\udcdd \u9805\u76ee: ' + ($json.reference || 'Security Scanner \u8a02\u55ae') + '\\n\ud83d\udc64 \u5ba2\u6236: ' + ($json.senderName || '\u672a\u77e5') + '\\n\u23f0 \u6642\u9593: ' + $json.created_at + '\\n\\n\ud83d\udd17 https://wise.com/home/review' }}",
        "additionalFields": {}
      },
      "id": "node_telegram_alert",
      "name": "Telegram Alert",
      "type": "n8n-nodes-base.telegram",
      "typeVersion": 1.6,
      "position": [
        350,
        150
      ],
      "credentials": {
        "telegramApi": {
          "name": "<your credential>"
        }
      }
    },
    {
      "parameters": {
        "operation": "append",
        "sheetId": "SPREADSHEET_ID",
        "table": "A:E",
        "columns": "=A:B:C:D:E",
        "options": {}
      },
      "id": "node_google_sheets",
      "name": "Google Sheets",
      "type": "n8n-nodes-base.googleSheets",
      "typeVersion": 1,
      "position": [
        350,
        300
      ],
      "credentials": {
        "googleSheetsOAuth2": {
          "name": "<your credential>"
        }
      }
    },
    {
      "parameters": {
        "toEmail": "={{ $json.customerEmail || 'andycywu@gmail.com' }}",
        "subject": "={{ '\u611f\u8b1d\u8cfc\u8cb7 Security Scanner\uff01\u8a02\u55ae #' + $json.orderId }}",
        "emailFormat": "html",
        "text": "={{ '<h2>\ud83c\udf89 \u611f\u8b1d\u60a8\u7684\u8cfc\u8cb7\uff01</h2>\\n\\n<p>\u89aa\u611b\u7684 <strong>' + ($json.senderName || '\u5ba2\u6236') + '</strong>\uff0c</p>\\n\\n<p>\u6211\u5011\u5df2\u6536\u5230\u60a8\u7684\u4ed8\u6b3e\uff1a<strong>' + $json.amount + ' ' + $json.currency + '</strong></p>\\n\\n<p>\u8a02\u55ae\u8a73\u60c5\uff1a<strong>#' + ($json.orderId || 'SC-' + Date.now()) + '</strong></p>\\n\\n<h3>\ud83d\udce6 \u7522\u54c1\u8cc7\u8a0a</h3>\\n<ul>\\n<li>Security Scanner \u500b\u4eba\u7248</li>\\n<li>GitHub: https://github.com/andycywu/security-scanner</li>\\n</ul>\\n\\n<h3>\ud83d\udca1 \u958b\u59cb\u4f7f\u7528</h3>\\n<ol>\\n<li>Clone repository</li>\\n<li>\u57f7\u884c: python3 scanner.py /path/to/your/skill</li>\\n<li>\u67e5\u770b\u5831\u544a</li>\\n</ol>\\n\\n<p>\u5982\u6709\u554f\u984c\uff0c\u8acb\u806f\u7e6b\uff1a@singularity_capital_bot</p>\\n\\n<p>---<br>\u5947\u9ede\u8cc7\u672c Singularity Capital LLC</p>' }}",
        "additionalFields": {}
      },
      "id": "node_email",
      "name": "Customer Email",
      "type": "n8n-nodes-base.emailReadImap",
      "typeVersion": 1.4,
      "position": [
        350,
        450
      ],
      "credentials": {
        "smtp": {
          "name": "<your credential>"
        }
      }
    },
    {
      "parameters": {
        "functionCode": "// \u8655\u7406\u6536\u6b3e\u8cc7\u6599\nconst amount = $json.amount || 0;\nconst currency = $json.currency || 'USD';\nconst orderId = 'SC-' + Date.now().toString(36).toUpperCase();\n\nlet product = 'Security Scanner \u500b\u4eba\u7248 $49';\nif (amount >= 499) {\n  product = 'Security Scanner \u4f01\u696d\u7248 $499';\n}\n\nreturn [{\n  json: {\n    amount,\n    currency,\n    orderId,\n    product,\n    created_at: new Date().toISOString(),\n    customerEmail: $json.senderEmail,\n    senderName: $json.senderName,\n    status: 'completed'\n  }\n}];\n"
      },
      "id": "node_order_processor",
      "name": "Order Processor",
      "type": "n8n-nodes-base.function",
      "typeVersion": 1,
      "position": [
        100,
        400
      ]
    }
  ],
  "connections": {
    "Wise Webhook": {
      "main": [
        [
          {
            "node": "Telegram Alert",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Google Sheets",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Order Processor",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Order Processor": {
      "main": [
        [
          {
            "node": "Customer Email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  },
  "settings": {
    "executionOrder": "v1"
  }
}

Credentials you'll need

Each integration node will prompt for credentials when you import. We strip credential IDs before publishing — you'll add your own.

Pro

For the full experience including quality scoring and batch install features for each workflow upgrade to Pro

About this workflow

Security Scanner - Payment Notification. Uses httpRequest, telegram, googleSheets, emailReadImap. Manual trigger; 5 nodes.

Source: https://github.com/andycywu/security-scanner/blob/44eb63438b62acfacaaaef7084ff88264291cf59/n8n-workflows/payment-notification-v2.json — original creator credit. Request a take-down →

More Email & Gmail workflows → · Browse all categories →

Related workflows

Workflows that share integrations, category, or trigger type with this one. All free to copy and import.

Email & Gmail

inbox-pilot — Ops Autopilot. Uses emailReadImap, httpRequest, googleSheets, telegram. Scheduled trigger; 14 nodes.

Email Read Imap, HTTP Request, Google Sheets +1
Email & Gmail

Signup Intake → CRM triage. Uses formTrigger, googleSheets, telegram, telegramTrigger. Webhook trigger; 28 nodes.

Form Trigger, Google Sheets, Telegram +3
Email & Gmail

This workflow automatically extracts data from invoice documents (PDFs and images) and processes them through a comprehensive validation and approval system. Multi-Input Triggers - Accepts invoices vi

Email Read Imap, N8N Nodes Scrapegraphai, Telegram +1
Email & Gmail

This workflow automates URL reporting to Spamhaus based on incoming spam/phishing sample emails. It watches one or more IMAP folders, extracts URLs from each email body, removes duplicates and common

Email Read Imap, HTTP Request
Email & Gmail

This n8n workflow helps users easily discover nearby residential construction projects by automatically scraping and analyzing property listings from 99acres and other real estate platforms. Users can

Email Read Imap, HTTP Request, Email Send