No badges we haven't earned. Here is what actually stands between an attacker and your balance, and what we ask of you in return.
Signing in proves who you are. Releasing money proves you meant to. We deliberately keep those separate, so a phone left unlocked on a desk is not the same thing as a drained account.
Every outbound transfer needs your six-digit PIN. It is stored hashed, so nobody at SafeRemit can read it, and it never travels in a form that could be replayed. Repeated wrong attempts lock transfers for a cooling-off period instead of letting an attacker keep guessing.
On mobile you can unlock the app with the fingerprint or face recognition your device already trusts. It never replaces the PIN on a transfer. It just saves you retyping a password to look at your balance.
Each browser and phone that signs in is recorded with its approximate location and last-used time. If you don't recognise one, revoke it from Profile → Devices and that session stops working immediately.
Email and phone are confirmed with short-lived one-time codes at sign-up, and again for a password reset. Codes expire quickly and are single-use.
The app, the website and the API are served over TLS only, with plain HTTP redirected. Session cookies are restricted to our own site, and every state-changing form carries a CSRF token.
The production database is backed up on a rotating schedule to storage separate from the application, so an incident on the app host does not take your transaction history with it.
Very few people lose money to a broken password. They lose it because an invoice arrived with the account number changed, from an address one character different from their supplier's.
Borderless is built around that. The send flow reads the bank details off the document rather than asking you to retype them, shows each extracted field back to you, and requires you to confirm they match what your supplier sent. Check that on a channel you already trust, not by replying to the email the invoice came from.
Moving money across borders is a regulated activity. We've put that in plain view in the product instead of burying it. The summary below is the short version; our AML, CFT and KYC policy is published in full.
Before a first payment to any supplier, confirm the bank details by phone or a chat you already use. Never by replying to the email carrying the invoice.
Different from your password, not written next to it, and not shared with anyone, including anyone claiming to be us. We will never ask for it.
Glance at Profile → Devices now and then and revoke anything you don't recognise, especially after using a shared or public computer.
If a transfer you didn't start shows up, or a sign-in you don't recognise, contact us immediately. Speed is what decides whether funds can be recalled.
Please tell us before it becomes an incident. Email [email protected] with enough detail to reproduce the issue and we'll acknowledge it.
Please give us a reasonable window to fix the problem before disclosing it publicly, and don't access, modify or delete data belonging to anyone else while investigating. Testing that degrades the service for other customers isn't something we can treat as research.
It takes a few minutes. You can top up and receive from the start, and verify when you're ready to send money out.