Hi @mahmoed-alhadadd Welcome!
Business Verification isn’t what blocks this, the app being unpublished is. Meta only delivers the dashboard test payload while the app sits in Dev mode, real inbound messages don’t reach your callback URL until the app is switched to Live. Flip it in App settings > Basic > App Mode. That needs a valid privacy policy URL on the app, but no App Review and no business verification.
If real messages still don’t arrive once it’s Live, open the Graph API Explorer and GET YOUR_WABA_ID/subscribed_apps. If your app name isn’t in the list, POST to the same endpoint to re-register it, then GET again to confirm.
See this:
In metas documentation, it says, “Your app must be in Live mode; some webhooks will not be sent if your app is in Dev mode.” So your app needs to be in live mode + a privacy policy!