How we keep your money safe

01Your account

• Every payment needs your PIN. Five wrong tries lock it for 15 minutes, wherever they came from.
• Fingerprint login belongs to one phone. The phone keeps a key locked behind your fingerprint. If someone adds a new fingerprint to the phone, the key stops working.
• Changing your password signs everyone else out. A reset signs out every phone, and turns fingerprint login off everywhere.
• Guessing gets nowhere. Sign-in codes give up after five wrong tries, and sign-in attempts are limited per account and per connection.
• You hear about new sign-ins, and whenever fingerprint login is turned on for a phone.

02Your money

• Two-sided records. Every movement is written as money out of one place and into another, and the books must balance to the cent. A balance can’t appear from nowhere.
• Paid once. A top-up reported twice, by a payment provider and by the app at the same moment, is still credited once.
• Held apart. Customer money is kept separate from NyZen’s own. See Licensing and partners.
• Transfers you can stop. A transfer to a bank or mobile wallet can be cancelled while it is still being checked, and the whole amount comes back.

03Your cards

• Card numbers and the security code show only when you ask, and hide again a minute later.
• Freeze a card in one tap, switch online payments off, and get alerts when spending passes your caps.
• Lost it? Freeze it, move the balance back, then cancel it and order a new number.

04Your data

• Passwords and PINs are stored only as one-way hashes. Nobody at NyZen can read them.
• Account numbers you pay are encrypted where they are stored.
• Identity checks are done by our verification partner, and access to them is logged.
• Every statement carries a seal only NyZen can make; anyone can check one at Verify a statement.
• More in the Privacy Policy.

05What you can do

• Use a password you don’t use anywhere else, and a PIN that isn’t your birthday.
• Keep your phone locked, and turn on fingerprint login.
• Check the name before you send; a payment to another NyZen user arrives at once.
• Something wrong? Change your password (it signs everyone else out), freeze your cards, and tell us.

06Report a security problem

If you think you’ve found a weakness in NyZen, write to security@nyzen.one. We reply within one business day and keep you updated until it’s fixed.

Please include

• What you found and where: the page, screen or address.
• How to see it happen, step by step.
• What someone could do with it.

While you look

• Use only your own accounts, and never look at, change or keep anyone else’s data or money.
• Don’t disrupt the service: no denial of service, spam or social engineering of our team.
• Give us reasonable time to fix it before telling anyone else.

Research done in good faith within these rules is welcome: we won’t take action against you for it, and we’ll credit you if you’d like.