Skip to content

Flutterwave API Key

Service Name: Flutterwave

Service Description: Flutterwave is a fintech company that provides payment infrastructure for global merchants and payment service providers across Africa. It offers a comprehensive suite of products including payment processing, global payment acceptance, and various financial services.

Service Address: https://flutterwave.com/

Validation Type: API Auth

IP Allow list: IP whitelisting is available through Flutterwave's dashboard for added security.

Secret Access Scope: Grants access to Flutterwave's payment processing API, allowing merchants to process payments, manage transactions, create payment links, and access other financial services.

Secret Revokement URL: https://dashboard.flutterwave.com/dashboard/settings/apis

Secret Example: FLWSECK_TEST-1234abcd5678efgh9012ijkl-X

Suspicious Activity Investigation Instructions:

  • Review transaction logs in the Flutterwave dashboard for unauthorized payment processing.
  • Check for unusual API calls or transaction patterns in your account.
  • Monitor for unexpected webhooks or callback notifications.
  • Verify if there are any unauthorized integrations or applications using your API key.
  • Review transaction volumes and amounts for anomalies compared to normal business patterns.

Mitigation Instructions:

  • Log in to your Flutterwave dashboard at https://dashboard.flutterwave.com/
  • Navigate to Settings > API Keys
  • Generate a new API key to replace the compromised one.
  • Update the API key in all legitimate applications and services.
  • Implement IP whitelisting for your API keys to restrict access to specific IP addresses.
  • Enable two-factor authentication for your Flutterwave account.
  • Review and update webhook endpoints to ensure they point to legitimate URLs.
  • Monitor transaction activity closely after replacing the key to ensure no unauthorized access continues.