Safety, security, and stability at the core

Payoneer uses 2-step verification to help ensure that no malicious actors are able to break into your account. 2-step verification adds an extra step to certain account-related activities by sending a code to your mobile device or via phone call, which you’ll need to enter in before you can continue navigating through your account.

We use CAPTCHA challenges in several places on our system, including our login page. This prevents bots from brute forcing a user account.

RSA adaptive authentication is an intuitive user verification system that evaluates risk factors, e.g., country, IP address and transaction size to flag any account abnormalities. After detecting activity that might signal an ATO, the system issues additional identification steps, such as security questions,

To prevent account takeovers, we employ a number of proactive methods that keep bots and hackers from reaching a user’s account. These include: Web Application Firewalls, Bot-locating software, Duplicate site-tracking, Proactive user-account searches and more.

We use complex risk model and behavior profiling programs to analyze suspicious user transactions. The information we get from these analyses is then used to predict malicious future behavior that might signal an account takeover.

Payoneer uses 2-step verification to help ensure that no malicious actors are able to break into your account. 2-step verification adds an extra step to certain account-related activities by sending a code to your mobile device or via phone call, which you’ll need to enter in before you can continue navigating through your account.

At Payoneer, every transaction is heavily guarded behind firewalls and sophisticated anti-hacking techniques. Each and every transaction is monitored to prevent fraud, identity theft, phishing encounters, and other attacks.

Should an attempted attack be identified, our dedicated teams of security specialists investigate the source and take precautions to protect your account, as well as those of other account holders.

When updating your account information you will receive email notifications from Payoneer. If any unusual account activity is detected, you will receive an email from us detailing the transaction. Should you not recognize this transaction, you will be provided an option to contact our support department night or day.

To verify your identity when calling us, we may ask you questions such as account information and/or personal details.

• Prevent Malware Infections: To defend against viruses, malware, and other online threats make sure to keep your security software, your operating system and browsers updated and current in order. Always remember to also set automatic updating if available.
• Maintain Strong Passwords: The best passwords are long and contain letters, capital letters, numbers and certain symbols in a sequence that do not form a word. Do not use the same password for other accounts. If you keep a written record of your passwords, keep them away from your devices and store in a safe place.
• Use Anti-Virus Software: Use trusted anti-virus software, and keep it up-to-date.

• Logging on to Public Wi-Fi: Limit the type of business you conduct in public Wi-Fi hotspots, as your computer could be exposed to strangers who share that network, including predators that hide on those networks, waiting for an innocent victim to log on.
• Be Aware of Suspicious Senders: Be very suspicious of communications that ask you to act immediately.
• Connect Securely: Only submit payment information, personal information or access credentials over a secure connection. Make sure to look for ‘HTTPS’ as part of the URL address and check the SSL* certificate’s validity.
• Watch Out for Bogus Websites: Be suspicious of any unusual looking websites – for example, often long website addresses are indicative of an attempt to fool the user.
• Remember to Log Out: Make sure to sign out from Payoneer and other websites after completing your visit. If you are using a public computer, delete your browsing history.

* SSL- A Secure Sockets Layer Certificate (SSL) is a digital certificate that validates the authentication of a website and encrypts any personal/sensitive information sent across the internet so only the intended recipient can understand it. This is very important, as personal information is passed from one computer to another to get to the destination server, and with an SSL Certificate you can be sure that you are sending information to the right server.

The Payoneer password selection page will prompt you to create a unique and difficult-to-crack password. Avoid easy patterns such as ‘1234’ or ‘PASSWORD’, birthdays or family names.

Strong passwords should be 12 or more random, unrepeated characters, and should contain ALL of the following characteristics:

• Lower case characters
• Upper case characters
• Numbers
• Punctuation & “Special” characters (e.g.!@#$ %) – only select symbols that you can access from the keyboard, and that you can also access if you use a smartphone

• Never share your passwords with anyone. Passwords are sensitive, confidential and personal codes.
• Passwords should not be kept next to or written on your Payoneer card.
• Do not reveal a password in any email, chat, or other electronic communication.
• Do not speak about a password near others.
• Do not hint at the format of a password (e.g., “my dog’s name”).
• Never reveal a password on questionnaires or security forms.
• If someone demands a password, refuse them. Refer them to this Payoneer instruction set.

If you suspect that your Payoneer account has been accessed without permission, immediately contact us and then change your password.

Phishing is a type of Internet fraud in which a person attempts to acquire a user’s sensitive information by presenting itself as a trustworthy entity (Payoneer, in our example). This information includes theft of credit card numbers, usernames, passwords, bank account details and other confidential information.

These malicious entities then use this information for making online purchases and may commit identity theft, meaning they pose as the person whose details they have stolen in order to receive new credit cards, ID cards, and more.

To report a phishing attempt / attack click here.

Stay safe by following these rules:

1. Never send Payoneer card information in an email, text message or via social media.
2. Likewise, never send your Payoneer account password or username in an email, text message or other social media messages.
3. Refrain from opening links from an unknown origin (even if there is no website, it doesn’t mean you will not end up downloading a Trojan to your PC).

We recommend that you review these simple security tips:

1. Never write your 4-digit PIN on your Payoneer card, and don’t keep it on a slip of paper in your wallet.
2. One of the simplest ways to protect yourself from ATM skimmers is to cover the PIN pad when you enter your digits.
3. Never provide your full card number to anyone – even a Payoneer representative will only ask you for the last four digits of your card.
4. Shred statements and receipts that show your card information before discarding.
5. Don’t leave your Payoneer card face up with numbers showing in plain sight of strangers.
6. Report lost or stolen cards to Payoneer immediately.

Click here to view the Payoneer ‘Preventing Identity Theft Infographics’.

• Maintaining physical control of your device is the primary level of protection.
• Keep it updated, as operating systems and applications provide patches and fixes for even the most recent security issues.
• Use a passcode or PIN to protect your device and data. Install and enable remote wipe features so that, if your smartphone is stolen or lost, you can remotely wipe it clean of any of your personal information or access to your mail.
• Lock your phone and allow it to re-lock after 30 seconds or so of inactivity.
• Use trusted Wi-Fi networks. Connecting your device to unknown wireless networks can potentially expose your data.
• Turn off Bluetooth, Wi-Fi, NFC (Near Field Communication) and other connections when they’re not being used so they cannot be used to access your device.
• Don’t jail break or root your smart phone or tablet. Be aware that jail breaking or rooting your device may expose your device to malicious software.

If you receive a suspected ‘phishing’ email, spam, or other suspicious emails claiming to be from Payoneer please do not click on any links or answer it. Instead, forward it to our customer support and a Payoneer representative will get back to you as soon as possible.

When you forward the suspicious message, add the phrase “Suspected Phishing Email” to the subject.

If your card has been lost or stolen, or if you suspect that you are a victim of fraud or identity theft please contact us immediately. Or, call us immediately at +1 (646) 386-2434 in the United States, 24 hours a day, 7 days a week.