Skip to content

Klarna Merchant ID Secret

Service Name: Klarna

Service Description: Klarna is a Swedish fintech company that provides online financial services such as payment solutions for online storefronts, direct payments, post-purchase payments, and more. It allows merchants to offer their customers the ability to pay now, pay later, or pay over time.

Service Address: https://www.klarna.com/

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through Klarna Merchant Portal

Secret Access Scope: Grants access to Klarna's payment processing API, allowing merchants to create payment sessions, retrieve transaction data, process refunds, and manage orders.

Secret Revokement URL: https://developers.klarna.com/api/#authentication

Secret Example: EG7Fj4Xq:shppa_abcdefghijklmnopqrstuvwxyz123456

Suspicious Activity Investigation Instructions:

  • Review Klarna Merchant Portal for unusual transaction activity
  • Check for unexpected refunds or payment authorizations
  • Monitor for changes in API integration settings
  • Review API call logs for unauthorized endpoints or unusual request patterns
  • Verify transaction volumes match expected business patterns

Mitigation Instructions:

  • Log in to your Klarna Merchant Portal

  • Navigate to Settings > API Credentials

  • Revoke the compromised API credentials

  • Generate new API credentials with appropriate permissions
  • Update your integration with the new credentials
  • Consider implementing IP restrictions for API access
  • Review and update security policies for handling API credentials
  • Contact Klarna support if you suspect fraudulent activity