Security — SecureIBAN

How we defend your account

SecureIBAN applies a multi-layer security approach. Our platform uses modern cryptography, continuous monitoring, and human-reviewed escalation to prevent, detect and respond to threats. Below is a concise, practical breakdown.

Zero-knowledge session encryption

All session cookies and API channels are TLS encrypted. We use modern ciphers and perfect forward secrecy.

Device binding & anomaly checks

Devices are fingerprinted; unusual locations or rapid changes trigger soft-locks and verification steps.

Multi-factor authentication (MFA)

We support TOTP apps, SMS OTP and hardware tokens (U2F/WebAuthn coming soon).

Transaction monitoring & fraud AI

Real-time models detect anomalies for every transaction and block suspicious activity immediately.

Card protections & 3D Secure

Card tokenization, 3D Secure and merchant controls reduce fraud risk and improve dispute resolution.

Secure operations & compliance

Segregated duties, audited processes and a responsible compliance program protect both customers and the platform.

Multi-Factor Authentication (MFA)

We strongly recommend enabling MFA. Supported methods:

TOTP apps (recommended): Google Authenticator, Authy, Microsoft Authenticator — uses time-based one-time codes.
SMS OTP: convenient but less secure; recommended as a backup method only.
Hardware token / WebAuthn: the strongest option (FIDO2) — contact us to enable in your region.

Create an account to enable MFA and other protections — we walk you through setup during onboarding.

Open Account Login

If you suspect fraud or loss

Immediate steps we recommend:

Change your account password and enable MFA (if not already).
Review recent transactions in the app and flag any you don’t recognise.
Contact SecureIBAN Support immediately: use in-app chat or call 24/7 Support.

Report now: Contact 24/7 Support — choose “Account Security” for priority handling.

Security FAQs

Contact support immediately to suspend SMS OTP and device access. If you used a TOTP app, reconfigure MFA using a saved recovery code or by contacting Support for identity verification.

On your Security Settings page you can view active sessions, recent logins, and revoke access per device. We recommend revoking any unknown session and changing your password immediately.

Never. SecureIBAN will not ask for your password or full OTP by email, phone or chat. If you receive such a request, it is a phishing attempt. Contact Support immediately.

Account Security Snapshot

A quick view of key account protections.

MFA: Unknown

Recent login: —

Trusted devices: 0 listed

Open Secure Account Existing Customer Login

Active Sessions

Devices and recent access. Revoke any entry you don’t recognise.

Security Resources

What happens if I lose my phone?

How do I check active sessions and devices?

Will SecureIBAN ever ask for my password?