Skip to main content

Customer IP address

If you use the PayWay REST API or classic credit card API sending your customers IP address to PayWay helps protect your website against card testing fraud.

An IP address is a series of numbers used as the address for messages sent over the Internet. When a customer connects to your web server, they send their IP address. Your web server responds by sending web pages back to that IP address.

The customer's IP address helps us to detect fraud via:

  • the location of the customer (e.g. a high-risk country)
  • the use of a VPN to hide their location
  • grouping payments from a single computer network
This information is technical, you may need to contact your IT provider.

When to send the customer IP address

Your server must send the customer IP address when:

  • you are using the PayWay REST API or classic API to process payments and,
  • your web page or app is generally available on the internet and,
  • the page or app allows a customer to process a payment

Do not send a customer IP address when:

  • your staff typed in the payment details into a secure system available only to them or,
  • your system processed the payment based on a schedule or event (e.g. monthly donation or goods shipped)

How to send the customer IP address

The customer IP address must be the IP address of the user that processed the payment. Do not send the IP address of your web server or firewall as the customer IP address.

How you process payments How to send the customer IP address
PayWay REST API Send parameter customerIpAddress. See PayWay REST API Documentation.
PayWay Classic Credit Card API Send parameter order.ipAddress. See PayWay Classic Credit Card API Documentation.

To check if your system is sending the IP address:

  1. Sign in to PayWay
  2. Click Daily Settlement Report in the Reports menu
  3. Click Export All Payments

Check the values in column AS - CustomerIpAddress. You may also wish to check the weekly or monthly settlement reports.

Contact us

For sales, help and technical support contact us.


The information contained in this publication is provided for learning purposes only and is subject to change. Revisions may be issued from time to time that encompass changes or additions to this module.

This is a guide only and it is not comprehensive. It does not impinge on or overrule any formal arrangement you may enter into with the Bank. The Bank and its officers shall not have any liability for any losses of any kind incurred in connection with any action, inaction or decision taken in reliance on the information herein or for any inaccuracies, errors or omissions. In this publication references to the "Bank" are to Westpac Banking Corporation ABN 33 007 457 141 and to any of its operating Divisions, including BankSA and St.George.