Checkout.com is introducing new IP ranges for webhooks and our API. We plan to enable them for live traffic in January 2027.
We don’t recommend using IP restrictions for inbound or outbound Checkout.com traffic. If you have traffic restrictions in place, you can find the new IP addresses below.
Please update your IP allow lists to accept traffic from these addresses before January 11, 2027. If you don’t restrict inbound or outbound traffic, this change won’t affect you.
New IP addresses for webhooks (Sandbox and Production)
- 4.159.40.224/28
- 135.116.97.64/28
New IP addresses for Checkout.com’s API (Sandbox and Production)
- 90.98.0.0/17
- 90.98.128.0/18
Retrieve IP address lists programmatically
You can retrieve our IP addresses in a machine-readable format from the following endpoints:
Production environment:
- https://checkout.com/docs/public/files/ip-lists/api-live.txt
- https://checkout.com/docs/public/files/ip-lists/webhooks-live.txt
Sandbox environment:
- https://checkout.com/docs/public/files/ip-lists/api-sandbox.txt
- https://checkout.com/docs/public/files/ip-lists/webhooks-sandbox.txt
Each file contains a list of IP addresses and CIDR blocks, with one address or block displayed per line.