Security
Protection at every layer.
From the moment you sign in to the moment money leaves your account, multiple safeguards work together to keep you safe.
Two-factor authentication
Protect sign-in with an authenticator app, plus single-use backup codes.
Transaction PIN
Every payment requires your private 4-digit PIN. Five wrong attempts lock payments for 30 minutes.
Step-up verification
Larger payments need an extra one-time code sent to you.
Device management
See every device signed in, where and when — and sign any of them out remotely.
New sign-in alerts
We email you when your account is accessed from a new device, with a one-click “this wasn’t me” lockdown.
Fraud monitoring
Unusual activity — like large payments from a new device — is flagged and reviewed by our team.
Encryption
Card details are encrypted at rest with AES-256 and only revealed after PIN verification.
Session protection
Short-lived sessions with rotating tokens; stolen tokens are detected and revoked automatically.
Account lockout
Repeated failed sign-ins temporarily lock your account and alert you by email.
Report suspicious activity
If you think someone has accessed your account, immediately sign out all devices from Settings → Security, change your password, freeze your cards and contact us. Report phishing emails to [email protected].