Security
Security by design,
not an afterthought.
End-to-end encryption, biometric authentication, and real-time fraud monitoring are built into every transaction on PPAY, not bolted on afterward.
How we protect you
Encrypted, end to end
Data in transit is protected with TLS 1.3. Data at rest is encrypted with AES-256.
Biometric & two-factor authentication
Every account, and every sensitive action within it, is protected by biometric and two-factor verification.
Monitored around the clock
Our security team monitors for threats 24/7. Any incident is disclosed to you, and relevant authorities, within 72 hours of discovery.
Independently audited
We conduct regular third-party security audits and penetration testing.
Compliance & verification
Verified identities
Every user completes a standard KYC process — a government-issued ID and a biometric check — before accessing certain features.
Transaction monitoring
Transactions are screened for fraud, sanctions exposure, and suspicious activity in line with our AML & KYC Policy.
Regulatory compliance
We comply with the Nigeria Data Protection Regulation (NDPR) and applicable anti-money laundering obligations. PPAY is a technology company, not a bank.
The full picture, in writing.
This page summarises the protections and compliance obligations already detailed in our legal policies. For the complete, binding terms, read the source documents.