Skip to content

Moneywave API Key

Service Name: Moneywave

Service Description: Moneywave is a payment processing platform that enables businesses to accept payments, transfer funds, and manage financial transactions across Africa. It provides APIs for integrating payment solutions into applications and websites.

Service Address: https://moneywave.flutterwave.com/

Validation Type: API Auth

IP Allow list: IP whitelisting available through the Moneywave dashboard for API requests

Secret Access Scope: Grants access to payment processing APIs, fund transfers, account management, and transaction history.

Secret Revokement URL: https://moneywave.flutterwave.com/dashboard/settings

Secret Example: mw_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Suspicious Activity Investigation Instructions:

  • Review transaction logs in the Moneywave dashboard for unauthorized transfers or payments
  • Check API request logs for unusual patterns or access from unexpected locations
  • Monitor for unexpected changes to API settings or webhook configurations
  • Verify transaction volumes and amounts against expected business patterns
  • Review any recent changes to account settings or API configurations

Mitigation Instructions:

  • Log in to your Moneywave dashboard immediately
  • Navigate to Settings > API Keys and regenerate your API key
  • Update the API key in all legitimate applications and services
  • Enable IP whitelisting for API access if not already configured
  • Review and update webhook URLs to ensure they point to legitimate endpoints
  • Enable two-factor authentication for your Moneywave account
  • Review account permissions and remove any unnecessary access
  • Monitor transaction activity closely for several days after the incident