That is not quite correct. The API invokes your callback URL when it receives the payment (i.e. 0 confirmations) and then keeps invoking your callback URL for every new confirmation (1, 2, 3, ...). It will stop doing this when you acknowledge the callback (I think you need to return the string "*ok*" or something like that). So this is perfect for zero-confirmations payments.