Tabby is introducing an update to how transactions in Saudi Arabia are processed.
If your integration processes Tabby payments in KSA, you may need to update certain technical configurations before 23 March 2026 to ensure payments continue processing normally. No downtime is planned for this change. Businesses operating only in the UAE or Kuwait are not affected.
Action required Verify whether your systems enforce IP allowlisting, redirect URL domain validation, or fixed API base URLs, and update them if necessary to ensure your integration continues processing Tabby payments in Saudi Arabia (KSA) after 20 March 2026.
If required updates are not implemented by this date, some integrations may experience: - Failed webhook delivery - Customers unable to open checkout pages - Missing KSA data for certain API endpoints
Please check whether your systems enforce any of the following: - Webhook IP allowlisting - Redirect URL domain validation - Fixed API base URLs
1. Webhook IP allowlisting If your system restricts incoming webhooks by IP address, add the following IPs used for KSA payment and dispute webhooks: 34.166.128.182, 34.166.170.3, 34.166.249.7.
2. Redirect domain validation If your backend or mobile applications validate redirect domains, ensure the following domains are accepted: https://checkout.tabby.sa https://api.tabby.sa After the change, KSA checkout links will be issued under these domains.
3. API routing (if applicable) Some endpoints serving Saudi Arabia traffic will be available under: https://api.tabby.sa