Security

Security Center

Your financial security is our highest priority. TrustPay employs bank-grade encryption, multi-layer authentication, and 24/7 fraud monitoring to protect your accounts and personal information at every step.

Last updated: January 15, 2026

1. Encryption & Data Protection

Every piece of data you share with TrustPay is protected by industry-leading encryption standards. We use 256-bit AES encryption for data at rest and TLS 1.3 for data in transit, the same level of security trusted by government agencies and global financial institutions.

Your sensitive information is stored in segmented, access-controlled environments with continuous monitoring. We maintain a zero-trust architecture, meaning no user, system, or application is trusted by default and every access request is independently verified.

Encryption standards we follow

  • 256-bit AES encryption for all stored data
  • TLS 1.3 for all data transmitted between devices and servers
  • Hardware Security Modules (HSMs) for cryptographic key management
  • End-to-end encryption for in-app messaging and customer support
  • Tokenization of card numbers for all stored payment methods
  • SHA-256 hashing for all passwords and PINs

Data protection measures

  • Data is segmented by type (PII, financial, biometric) with separate access controls
  • Geographic data residency for compliance with regional regulations
  • Automated data loss prevention (DLP) scanning on all outbound communications
  • Quarterly third-party penetration testing by independent security firms
  • Continuous vulnerability scanning and patch management
  • Annual SOC 2 Type II and ISO 27001 audits

2. Authentication Methods

We go beyond passwords to verify your identity. TrustPay supports a range of authentication methods, and we strongly encourage every customer to enable at least two-factor authentication (2FA) on their account.

Biometric authentication is available on supported devices, allowing you to log in and authorize transactions with your fingerprint or Face ID. This combines convenience with security, ensuring only you can access your account.

Two-factor authentication (2FA)

  • SMS one-time passcodes sent to your registered phone number
  • Authenticator app codes (Google Authenticator, Authy, Microsoft Authenticator)
  • Hardware security keys (YubiKey, Titan) for the highest level of protection
  • Trusted device management to remember verified devices
  • Login alerts whenever your account is accessed from a new device or location

Biometric authentication

  • Fingerprint authentication (Touch ID on supported devices)
  • Facial recognition (Face ID on supported devices)
  • Voice recognition for phone-based customer support verification
  • Biometric data is encrypted and stored locally on your device — never on our servers
  • Falls back to PIN or password if biometric verification fails

3. Fraud Monitoring & Detection

Our fraud detection systems analyze every transaction in real time, using machine learning models trained on billions of data points to identify suspicious activity before it affects you. The system evaluates transaction amount, location, device, merchant category, and behavioral patterns to assign a risk score in milliseconds.

When suspicious activity is detected, we may decline the transaction, request additional verification, or temporarily freeze your account while our fraud team investigates. You will receive an immediate alert via push notification, SMS, and email whenever a flagged transaction occurs.

What we monitor

  • Unusual transaction patterns or amounts outside your normal behavior
  • Transactions from new devices, locations, or IP addresses
  • Multiple rapid transactions or velocity checks
  • Card-not-present transactions on unverified merchants
  • International transactions outside your travel history
  • Account access attempts from anonymizing networks (VPNs, Tor)

How we respond

  • Instant push notification, SMS, and email alerts for flagged transactions
  • Temporary account freeze pending your confirmation
  • Automated card replacement if compromise is confirmed
  • Dedicated fraud specialist follow-up within 1 hour for confirmed cases
  • Zero Fraud Liability — you are not responsible for unauthorized transactions reported within 60 days

4. FDIC Insurance & Account Protection

Your deposits at TrustPay Global Finance Bank are FDIC insured up to $250,000 per depositor, per ownership category, in the event of a bank failure. This insurance is backed by the full faith and credit of the United States government.

FDIC insurance covers all deposit accounts, including checking, savings, money market accounts, and certificates of deposit (CDs). It does not cover investment products such as stocks, bonds, mutual funds, or crypto assets.

  • FDIC insurance up to $250,000 per depositor, per ownership category
  • Coverage includes checking, savings, money market, and CD accounts
  • Joint accounts are insured up to $500,000 ($250,000 per co-owner)
  • IRAs and certain retirement accounts receive separate FDIC coverage
  • Investment products are covered by SIPC up to $500,000 (separate from FDIC)
  • You can verify our FDIC status at FDIC.gov or by calling 1-877-ASK-FDIC

5. Security Best Practices for Users

While we invest heavily in protecting your accounts, security is a shared responsibility. Following these best practices significantly reduces your risk of fraud and unauthorized access.

  • Use a unique, strong password of at least 16 characters — never reuse passwords across sites
  • Enable two-factor authentication on your TrustPay account immediately
  • Keep your operating system, browser, and TrustPay app updated to the latest version
  • Never share your password, PIN, or 2FA codes with anyone — including TrustPay employees
  • Beware of phishing emails, texts, and calls asking for your account information
  • Only access your account from trusted, personal devices — avoid public Wi-Fi or shared computers
  • Review your account statements and transaction history regularly for unauthorized activity
  • Enable push notifications for all transactions so you spot issues instantly
  • Use biometric authentication where available for an extra layer of protection
  • Report any suspicious activity to TrustPay immediately at +1 (415) 298-1877

6. Reporting Security Incidents

If you suspect unauthorized access to your account, a phishing attempt, or any other security issue, report it to us immediately. Fast reporting allows us to protect your account, investigate the incident, and prevent further damage.

TrustPay operates a 24/7 security incident response team. All reports are treated as priority and investigated by dedicated specialists. You will never be penalized for reporting a suspected incident in good faith.

How to report

  • Call our 24/7 Fraud Hotline: +1 (415) 298-1877
  • Email: security@trustpay.com for non-urgent security concerns
  • In-app: Tap Help → Report a Security Issue for immediate routing to our team
  • Mail: TrustPay Global Finance Bank, Security Operations Center, 350 Park Avenue, New York, NY 10022

What happens after you report

  • Your account may be temporarily frozen to prevent further unauthorized access
  • A fraud specialist will contact you within 1 hour to gather details
  • We will reverse any confirmed unauthorized transactions
  • A new card and account credentials will be issued if compromise is confirmed
  • You will receive a written summary of our investigation and resolution

Security Questions?

Our security team is available 24/7 to answer your questions and help you protect your accounts. Reach out anytime — we are here to help.