diff --git a/src/mobilerun_sdk/sdk/_common.py b/src/mobilerun_sdk/sdk/_common.py
index 476cdeb..d21c612 100644
--- a/src/mobilerun_sdk/sdk/_common.py
+++ b/src/mobilerun_sdk/sdk/_common.py
@@ -634,9 +634,10 @@ def verify_signature(
     if not hmac.compare_digest(expected, bytes.fromhex(digest)):
         raise WebhookVerificationError("invalid_signature")
     try:
-        return json.loads(raw)
+        return json.loads(raw.decode("utf-8-sig"))
     except (ValueError, UnicodeError):
-        raise WebhookVerificationError("malformed") from None
+        pass
+    raise WebhookVerificationError("invalid_json") from None
 
 
 def definite_confirm_failure(error: BaseException) -> bool: