Protected by default. Controlled by you.
Strong security is on from your first sign-in. Here's what we do, what you can do, and how to spot someone pretending to be us.
Layers that work together.
Two-factor sign-in
A code from your authenticator app on every login and sensitive change, backed by one-time recovery codes.
Security alerts
We tell you about new sign-ins and security changes, so you hear about anything unexpected straight away.
Fraud screening
Payments are checked as they happen. Anything unusual is held for review, not settled automatically.
Card controls
Hidden details until activation, tap-to-reveal afterwards, a PIN only you set, and one-tap freeze.
Encryption
Data is encrypted in transit and at rest. Passwords and PINs are stored hashed, never in plain text.
Transfer limits
Every account has an outgoing limit, which caps the damage if your details are ever misused.
Real, or someone pretending to be us?
Four everyday moments. Make your call on each.
If someone asks for these, it isn't us.
- Ask for your password, PIN or sign-in codes
- Ask you to move money to a "safe" account
- Ask you to install remote-access software
- Pressure you to act within minutes
Think something's wrong?
- 1Freeze your card in the app. It takes effect straight away.
- 2Change your password and check your two-factor settings.
- 3Tell us through a support ticket, with any transaction references.