Security

KYC and identity verification

We verify your identity using government-issued IDs, biometrics, and personal details to confirm account ownership, prevent fraud, and apply the right transaction tier for your needs.

Account access controls

Transaction PINs, OTP verification, trusted device signals, and login checks protect sensitive actions and ensure only you can access your account.

Real-time monitoring

Transfers, bill payments, card transactions, and wallet activity are monitored in real time for unusual or suspicious patterns that may indicate fraud.

Encryption

All data transmitted between your device and our servers is encrypted using TLS/SSL. Sensitive data at rest is encrypted using industry-standard algorithms.

How we protect your account

iDeliverPay uses a layered security approach to protect your money and data:

• Two-factor authentication: Sensitive actions like transfers and profile changes require OTP verification sent to your registered phone number or email.
• Transaction PIN: Every transaction requires your 4-digit PIN, adding a second layer of authorization beyond login.
• Device verification: New devices must be verified before they can access your account, preventing unauthorized logins from unknown devices.
• Session management: Active sessions are monitored and can be revoked. Inactive sessions expire automatically.
• Account tier limits: Transaction limits are applied based on your KYC level, reducing exposure in case of compromise.
• Fraud detection: Automated systems monitor for suspicious patterns including unusual amounts, new recipients, and rapid successive transactions.

What you should do

Security is a shared responsibility. Here's how you can help protect your account:

• Protect your PIN: Never share your transaction PIN with anyone, including iDeliverPay staff. We will never ask for your PIN.
• Guard your OTPs: OTPs are for one-time use only. Never share them via phone, text, email, or chat.
• Use a strong password: Choose a unique password that you don't use on other platforms.
• Lock your device: Use a screen lock (fingerprint, face ID, or PIN) on your phone to prevent unauthorized access.
• Verify recipients: Always double-check recipient names and account numbers before confirming transfers.
• Review transactions: Check your transaction history regularly and report anything suspicious immediately.
• Beware of phishing: iDeliverPay will never ask for your PIN, password, or OTP via phone, email, or social media. Do not click on suspicious links.

Device security

Your device is the gateway to your account. Keep it secure:

• Keep your operating system and the iDeliverPay app updated to the latest version.
• Do not use iDeliverPay on jailbroken or rooted devices, as they may have compromised security.
• Avoid using public Wi-Fi for financial transactions. Use mobile data or a trusted private network.
• Log out of iDeliverPay if you lend your device to someone, even briefly.
• If your device is lost or stolen, contact us immediately so we can secure your account.

Transaction safety

Every transaction on iDeliverPay includes multiple safety checks:

• Recipient confirmation: You must confirm the recipient name and details before a transaction is processed.
• PIN authorization: Every transfer and payment requires your transaction PIN.
• Real-time alerts: You receive instant notifications for every transaction, so you can spot unauthorized activity immediately.
• Transaction limits: Daily and per-transaction limits reduce your exposure in case of compromise.
• Idempotency protection: Duplicate transaction requests are automatically prevented.

If you notice a transaction you didn't authorize, contact us immediately. The sooner we know, the more we can do to help.

Report a security issue

If you suspect unauthorized access, fraud, phishing, account takeover, or a suspicious transaction, contact us immediately:

• Security team: security@ideliverpay.com
• General support: support@ideliverpay.com

When reporting, include your registered phone number, transaction reference (if applicable), and a description of the issue. The more detail you provide, the faster we can respond.

How we respond to security issues

When a security issue is reported, we may take the following actions depending on the severity:

• Review recent account activity and transaction history.
• Request additional identity verification.
• Temporarily restrict certain account actions.
• Suspend account access pending investigation.
• Reverse eligible unauthorized transactions.
• Reset account credentials and revoke active sessions.
• Escalate to partners, payment processors, or law enforcement where required.

We aim to respond to security reports promptly and will keep you informed of the outcome of our investigation.