Protect the account. Say what is real.

Passwords are hashed with scrypt. Session cookies are httpOnly and signed. Forms reject unexpected markup. Sensitive actions — transfers, PIN changes, status changes — write an audit line.

A transaction PIN is required before sends, withdrawals, bills, and savings transfers. You can change a PIN, change a password, turn on a second sign-in step, read login activity, and freeze the account.

Lost a device? Freeze the account from security settings, then change the password and the PIN. This website does not read a fingerprint. Biometric unlock is reserved for a future mobile app.

KYC collects a document label and moves a status. It does not verify an identity. Card numbers on screen are test patterns.