Wallet whitelisting is a two-sided security control that governs both the sending and receiving of cryptocurrency on your Payluk account.

For withdrawals — your account can only send funds to wallet addresses you have explicitly approved in advance. Any withdrawal request targeting an unknown address is automatically blocked, regardless of who or what initiates it.

For deposits — your Payluk wallet only accepts incoming funds from wallet addresses you have whitelisted. If a deposit arrives from an address that is not on your whitelist, the transaction is automatically reverted and no wallet balance is created. Unrecognised senders cannot fund your account.

This bidirectional control means funds can only ever flow between verified, trusted addresses — closing off both the inbound and outbound attack surface on your account.

How It Works

Wallet whitelisting acts as a gate on both ends of every transaction — inbound deposits and outbound withdrawals. No funds move in either direction unless the counterpart address is on your approved whitelist.

Deposit flow

When any crypto transaction arrives at the Payluk master wallet, the system reads the from address and checks it against the sender's whitelist. Only matching addresses trigger a balance credit.

Crypto transaction arrives at Payluk wallet
          │
          ▼
  ┌─────────────────────┐
  │  Is the from-address │──── NOT whitelisted ──► Transaction REVERTED
  │  on the whitelist?   │                         No balance created
  └─────────────────────┘
          │
       YES ✓
          │
          ▼
  cNGN balance credited to customer wallet

Important: If funds are sent from a non-whitelisted address, the transaction is reverted on-chain and returned to the sender. No account balance is created. This is permanent and automatic — there is no manual override.

Withdrawal flow

Every time a withdrawal is requested — through the dashboard or the API — the system checks the destination address against the approved whitelist before any funds are released.

Customer requests withdrawal
          │
          ▼
  ┌───────────────────────┐
  │  Is the destination   │──── NOT whitelisted ──► Withdrawal FAILS
  │  address whitelisted? │
  └───────────────────────┘
          │
       YES ✓
          │
          ▼
  Withdrawal proceeds normally