3 Best APIs for Card Payments (Verve/Visa/Mastercard) in Nigeria

Flutterwave is one of Africa's most widely used payment infrastructure companies, providing a comprehensive API that enables businesses to accept payments locally across Africa and internationally in 150+ countries. Founded in 2016 and headquartered in San Francisco with major operations in Lagos, Flutterwave powers payments for over 1.3 million businesses across Africa. The platform is CBN-licensed, PCI DSS Level 1 certified, and handles billions of dollars in transactions annually. What the API Does The Flutterwave API provides a unified payment layer covering: card payments (Verve, Visa, Mastercard, AMEX, Discover); bank transfer checkout (USSD and direct NIP); mobile money (M-Pesa, MTN MoMo, Airtel Money, and more); virtual accounts for NGN collections; recurring billing and subscription management; split payments for marketplace revenue sharing; bulk transfers for mass payouts; multi-currency settlement in NGN, USD, GBP, EUR, and more; and payment links for no-code collections. How Developers Use It Developers sign up at flutterwave.com, obtain API keys from the Developer section of the dashboard, and integrate using the documentation at developer.flutterwave.com. Authentication uses Bearer token — secret key placed as "Authorization: Bearer sk_test_..." in request headers. Test mode keys only work in the test environment. SDKs are available for JavaScript, React, React Native, Flutter, Python, PHP, Node.js, and more. Inline checkout and redirect checkout are both supported. Webhooks deliver real-time transaction events to developer endpoints. Pricing Local transactions (cards, bank transfer, USSD, POS, Visa QR): 2% per transaction, broken down as 1.4% transaction fee + 0.6% platform fee. International cards (Visa, Mastercard, AMEX, Discover): 4.8% per transaction. Transfer fees: ₦10 for transfers up to ₦5,000; ₦25 for ₦5,001 to ₦50,000; ₦50 for transfers above ₦50,000. All fees are subject to 7.5% VAT. No monthly fee — only pay when you transact. By default, customers bear transaction charges but this can be adjusted in the dashboard. Authentication Bearer token using the secret key from your Flutterwave dashboard. Format: "Authorization: Bearer sk_test_{KEY}" for test, "Authorization: Bearer sk_live_{KEY}" for live. Never expose secret keys client-side. Rate Limits Flutterwave enforces rate limits and returns HTTP 429 (Too Many Requests) when exceeded. Specific thresholds are documented at developer.flutterwave.com/v3.0/docs/rate-limit. Compliance CBN-licensed, PCI DSS Level 1 certified. Flutterwave is registered with multiple African central banks and financial regulatory authorities. NDPR-compliant for Nigerian data protection. Challenges and Gotchas (1) The 0.6% platform fee on top of the 1.4% transaction fee makes the effective local rate 2% — ensure pricing models account for both components. (2) 7.5% VAT applies to all fees, not just the base rate. (3) International card chargeback risk requires careful implementation of refund and dispute handling. (4) Flutterwave has faced some regulatory challenges historically — stay current on their operational status. (5) Webhook endpoint verification (signature check) is mandatory in production. Company Background Flutterwave was founded by Olugbenga Agboola (GB) and co-founders in 2016. The company has raised over $500M in funding and is valued at over $3 billion, making it one of Africa's most valuable fintech companies. It operates in 34+ African countries and has processed over $26 billion in transactions. FAQs Q: What is the fee for local card payments in Nigeria? A: 2% per transaction (1.4% + 0.6% platform fee), subject to 7.5% VAT. No cap publicly published — verify on the pricing page. Q: Does Flutterwave support USSD payments? A: Yes. USSD is supported at the same 2% local rate. Q: Does Flutterwave support M-Pesa in Kenya? A: Yes. M-Pesa is supported for Kenya and other East African markets. Q: Is there a sandbox? A: Yes. Use test mode API keys (sk_test_...) for sandbox testing. Q: What is the transfer fee? A: ₦10 for transfers ≤₦5,000; ₦25 for ₦5,001–₦50,000; ₦50 for transfers above ₦50,000. All subject to VAT.

Paystack is Nigeria's most widely adopted payment gateway API and is a subsidiary of Stripe, the global payments infrastructure company that acquired Paystack in 2020. Founded in 2015 by Shola Akinlade and Ezra Olubi, Paystack was part of Y Combinator's 2016 batch and quickly became the default payment choice for Nigerian developers and businesses. The company is CBN-licensed and PCI-DSS compliant, and currently serves thousands of businesses across Nigeria, Ghana, South Africa, and Kenya. The Paystack API is RESTful and uses Bearer Token authentication. Every request must include an Authorization header with the format: Authorization: Bearer sk_live_xxxx (for production) or Authorization: Bearer sk_test_xxxx (for sandbox). API keys are obtained from the Paystack dashboard at dashboard.paystack.com. Paystack provides both public keys (used in client-side code to initialize the checkout) and secret keys (used server-side for all API calls). Developers must never expose the secret key in client-side code. The standard Paystack integration flow involves three steps: initialize a transaction server-side using the /transaction/initialize endpoint (passing email, amount in kobo, and optional metadata), redirect the user to the returned authorization URL or embed the Paystack inline popup using the JavaScript SDK, then verify the transaction on your server using /transaction/verify/:reference after the customer is redirected back. This three-step flow ensures transactions are validated server-side before fulfilling orders, preventing fraud and order manipulation. Paystack supports the widest range of payment channels of any Nigerian gateway: Verve, Visa, and Mastercard debit cards; bank transfer (pay by transfer); USSD (for customers without smartphones); mobile money (in Ghana); and QR code payments. The Paystack Checkout modal intelligently displays only the channels available for the customer's device and location. In terms of pricing, local card transactions cost 1.5% plus ₦100, capped at ₦2,000 per transaction. The ₦100 flat fee is waived for transactions of ₦2,500 or less. This means very small transactions (micro-payments) are effectively charged at 1.5% only. International card transactions cost 3.9% plus ₦100, with no cap. Bank transfers (receiving payments via bank account) are charged flat: ₦10 for amounts up to ₦5,000; ₦25 for ₦5,001 to ₦50,000; and ₦50 for amounts above ₦50,000. Outgoing transfers (disbursements) are: ₦10 for ₦0–₦5,000; ₦25 for ₦5,001–₦50,000; ₦50 for above ₦50,000. There are no setup fees and no monthly platform fees. Businesses processing more than ₦10 million per month are eligible for volume-based discounts by contacting Paystack enterprise support. The Paystack sandbox environment mirrors production exactly — all features available in live mode are available in test mode. This is a critical advantage for Nigerian developers who need to test subscription billing, split payments, and bulk transfers without using real money. Test mode uses test card numbers provided in the Paystack documentation and simulates bank transfer payments via a confirmation prompt. Paystack also provides a Subscriptions API that allows developers to create subscription plans with daily, weekly, monthly, or annual billing cycles. When a customer first pays, a subscription authorization token is generated and stored securely by Paystack. Subsequent charges happen automatically without requiring the customer to re-enter card details. This is the foundation for building SaaS billing, membership platforms, and digital subscription products in Nigeria. The Split Payments (multi-split) feature allows marketplace operators to automatically split collected revenue between multiple subaccounts at the time of transaction — specifying percentages or flat amounts for each recipient. This is commonly used by Nigerian food delivery platforms, logistics aggregators, and gig economy apps. The Bulk Transfers API enables disbursement to hundreds of Nigerian bank accounts in a single API call by submitting a list of transfer recipients. This is used for payroll, agent commissions, loan disbursements, and customer refunds. From a compliance standpoint, Paystack is PCI-DSS Level 1 certified — the highest level of payment card security certification. All card data is encrypted and processed on Paystack's infrastructure. Merchants are not required to be PCI-DSS certified themselves. Paystack operates under CBN supervision and complies with the Nigerian Data Protection Regulation (NDPR). Webhook events from Paystack must be validated using the HMAC-SHA512 signature sent in the X-Paystack-Signature header. Developers should validate this signature before processing any webhook event. Paystack retries failed webhooks for up to 72 hours. Known challenges for Nigerian developers: (1) International card transactions have no cap on the 3.9% fee — high-value international payments can be expensive. (2) Bank transfer payments can take up to 30 minutes during bank downtime, so developers must handle pending states gracefully. (3) BVN and NIN verification are not built into Paystack directly — these require Dojah or Smile Identity as a separate integration. Frequently Asked Questions: Can I use Paystack without a registered business? Yes — individuals can create a starter account and start accepting payments. However, you will need to provide CAC documents to unlock higher transaction limits and settlements. Does Paystack support USD payments? Paystack processes international cards in USD, but settlements are in NGN after conversion. USD settlement is available only for Paystack International accounts. Can I process recurring payments automatically? Yes — use the Subscriptions API to save a customer authorization token and charge them on any schedule automatically. Is the test environment exactly like production? Yes — Paystack test mode has full feature parity with live mode, including subscriptions, splits, and bulk transfers.