IP Restriction

Merchant-based IP restrictions are applied to improve the security of payment requests. Once the restriction is enabled, payment requests must be sent only from pre-registered static IP addresses or supported IP ranges.

Supported IP Formats

The following IP formats can be registered:

A single static IP address

An IP range in CIDR /24 format

Note: IP ranges in /29, /30, and /31 formats are not supported.

IP Registration Limit

A maximum of 5 unique IP addresses or IP ranges can be registered for each merchant.

If more than five IP addresses or IP ranges are required, the following information must be provided:

A written justification for the additional IP addresses

The IP addresses or IP ranges to be registered

The transaction type or transaction types for which the IP addresses will be used

Requests for more than five IP addresses require a written justification and approval from the Sipay Risk team.

Dynamic IP Addresses

Dynamic IP addresses are not supported. Payment requests must be sent from registered static IP addresses.

If a shared NAT infrastructure is used, the outbound public IP addresses from which the requests will be sent must be provided.

IP Registration Process

IP registrations are performed exclusively by the Sipay Operations team through the Backoffice Admin Panel.

The following information must be included in the registration request:

The static IP address or supported /24 IP range

The transaction type or transaction types for which the IP address will be used

A written justification if more than five IP addresses are requested

Supported IP Formats#

IP Registration Limit#

Dynamic IP Addresses#

IP Registration Process#

Supported IP Formats

IP Registration Limit

Dynamic IP Addresses

IP Registration Process