diff --git a/src/main/java/net/frozenorb/apiv3/handler/ActorAttributeHandler.java b/src/main/java/net/frozenorb/apiv3/handler/ActorAttributeHandler.java
index fd5192e..753c875 100644
--- a/src/main/java/net/frozenorb/apiv3/handler/ActorAttributeHandler.java
+++ b/src/main/java/net/frozenorb/apiv3/handler/ActorAttributeHandler.java
@@ -38,7 +38,7 @@ public final class ActorAttributeHandler implements Handler<RoutingContext> {
                 return;
             }
 
-            if (!accessToken.getLockedIps().isEmpty()) {
+            if (accessToken.getLockedIps() != null && !accessToken.getLockedIps().isEmpty()) {
                 boolean allowed = accessToken.getLockedIps().contains(ctx.request().remoteAddress().host());
 
                 if (!allowed) {