According to TechCabal, Flutterwave experienced a security incident involving unauthorized transfers in April 2024, and the company confirmed to media that it had detected anomalous unauthorized activity [1]. Citing financial industry sources, the report stated that funds were transferred across accounts at multiple financial institutions and that the matter was referred to law enforcement for investigation [1]. Flutterwave did not confirm the loss figures reported by the media and stated that customer funds and data confidentiality remained intact [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on May 16, 2024 and we added it on Nov 8, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Flutterwave Confirms Detection of Unauthorized Activity in April
1 min read
- Disclosed
- May 16, 2024
- Published
- Nov 8, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance
What to do nowOur advice
Flutterwave did not confirm the loss figures reported by the media and stated that customer funds and data confidentiality remained intact [1].
Timeline
- Public disclosure of incident[1]
Technical details
Source-Supported Details
Flutterwave did not confirm the loss figures reported by the media and stated that customer funds and data confidentiality remained intact [1].
Source excerpt for verification: "One month after obtaining a court order to recover $24 million lost to unauthorised POS transactions, Flutterwave suffered another security breach that allowed unknown persons to divert billions of naira to several bank accounts." [1].
References
Media1
- [1]
“One month after obtaining a court order to recover $24 million lost to unauthorised POS transactions, Flutterwave suffered another security breach that allowed unknown persons to divert billions of naira to several bank accounts.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.