Your money. Your data. Protected.
Quraishy Pay is built so that every sign-in, every payment and every record is verified on our servers, not in the browser. Here is what the platform uses today and what you can switch on yourself.
Platform
Operational
Payments
Operational
Monitoring
Active 24/7
Account security
Layers you control from your own account settings.
- Two-factor authentication for sign-in
- Support for Google Authenticator and compatible apps
- Passwords of at least 8 characters, changeable at any time
- Device and session management — sign out any device you no longer use
- Security activity log with sign-in and credential-change alerts
Transaction security
Every movement of money is confirmed and recorded.
- Payments processed server-side; the browser never talks to payment providers directly
- Each transaction is verified before it is written to the ledger
- 4-digit PIN confirmation, plus a one-time code where applicable
- Monitoring for unusual patterns such as repeated or duplicated transfers
- Risk checks that can hold an order for review instead of sending it
Data protection
Designed so your information is only reachable by the people who need it.
- Traffic is encrypted in transit over HTTPS/TLS
- Data is stored in a managed database with row-level access rules
- Access control is enforced per account and per role
- Least-privilege architecture: sensitive operations run on the server only
- PINs and recovery codes are never displayed back to you after they are set
API security
For businesses building on Quraishy Pay.
- Separate API keys and secret keys per business account
- All API traffic uses HTTPS/TLS
- Webhook signature verification so you can trust the payload
- Rate limiting on sensitive endpoints
- Granular API access controls, with sandbox keys kept apart from live keys
Fraud & risk
Quraishy Pay monitors account and transaction activity for patterns that look unusual — for example repeated identical transfers, sudden changes in volume, or sign-ins from an unfamiliar device. When something looks wrong we may ask for additional verification, hold an order for manual review, or temporarily restrict transfers or recharges on an account until it has been checked.
Security centre & best practices
A few habits that keep your account safe.
- Never share your password, PIN or one-time codes — our team will never ask for them.
- Turn on two-factor authentication and store your recovery codes offline.
- Review your active sessions regularly and remove unknown devices.
- Use only official Quraishy Pay domains and apps.
- Report anything suspicious to us straight away.
Found something that looks wrong?
Tell our security team and we will look into it.