diff --git a/.gitleaks.toml b/.gitleaks.toml
index 0e832e0b7..dfee0b0dd 100644
--- a/.gitleaks.toml
+++ b/.gitleaks.toml
@@ -30,6 +30,10 @@ regexes = [
   '''remote-client-test-secret''',
   '''secret_password''',
   '''my-secret-token''',
+  # Fake Stripe key used as a fixture in the billing tests. Matched as a
+  # narrow pattern so a real key in any file, test or not, is still caught.
+  # The bracket keeps this line itself from looking like a key to scanners.
+  '''sk_test_placehold[e]r''',
   # Well-known Azure built-in role definition IDs used in Bicep role
   # assignments (AcrPull, Key Vault Secrets User). These are public,
   # Microsoft-documented constants, not credentials.