Security & Compliance

Fair, clear compliance - no sudden account freezes, no surprises.

Built-In, Not Bolted-On

Your Money is Always Protected

Every screen of the MaliSwap app is designed around security first - from how you log in to how your funds move.

Biometric Login

Face ID and fingerprint unlock your wallet instantly, so only you can ever get in - even if your phone falls into the wrong hands.

Hover for moreTap to flip

Face ID and fingerprint are processed entirely on your device's secure hardware - your biometric data never touches our servers, and you can always fall back to a PIN or password.

End-to-End Encryption

Every transaction and personal record is encrypted in transit and at rest using bank-grade standards, unreadable to anyone but you.

Hover for moreTap to flip

We use the same AES-256 and TLS 1.3 standards used by global banks. Even MaliSwap staff can't read your personal data without going through strict, logged access controls.

Two-Factor Authentication

A one-time code backs up your password for logins, new devices, and sensitive changes - a second lock on top of the first.

Hover for moreTap to flip

Codes are delivered by SMS or an authenticator app and expire within minutes. Require 2FA on every login, or only for high-risk actions like adding a new payout method.

Real-Time Alerts

Get notified the instant money moves, a new device logs in, or your profile changes - nothing happens without you knowing.

Hover for moreTap to flip

Push, SMS, and email notifications fire the moment anything changes, so you're never the last to know about activity on your own account.

MaliSwap13:41
Touch ID
Place your finger on the sensor to unlock
Authenticating…
MaliSwap13:41
Face Recognition
Look directly at the camera to confirm it’s you
Scanning face…
Verify It's You13:41
Enter the code sent to +254 7•• ••• 219
4 2 9 ·
Verify & Continue
Security Question13:41
What was the name of your first pet?
• • • • ·
Submit Answer
Trusted Devices13:41
iPhone 15 ProNairobi, Kenya
This device
MacBook AirLast active 2 hours ago
Idle
Samsung Galaxy S23Last active 3 days ago
Idle
Manage Devices
Verify Identity13:41
Upload a government-issued ID to finish KYC
National ID - frontJPG · 2.1 MB
National ID - backJPG · 1.8 MB
Continue
Verify Identity13:41
Quick Selfie
Matching your face to your uploaded ID…
Hold still…
Identity Verified
You’re all set to send and receive money
Go to Wallet
Notifications13:41
New device loginVerified with Face ID just now
Fraud check passedYour last transfer was automatically verified
Security team reviewA flagged transaction was cleared in 4 minutes
Security tipEnable a backup verification method
Fraud Monitoring

Every transaction is watched 24/7 for unusual patterns, with anything suspicious automatically paused before it can cause harm.

Hover for moreTap to flip

Our systems score every transaction against known fraud patterns in real time. Anything unusual is held for review automatically, before money ever leaves your account.

Secure Identity Verification

Fast, encrypted KYC checks confirm it's really you opening the account, without ever storing your documents in the clear.

Hover for moreTap to flip

KYC documents are encrypted the moment they're uploaded and automatically purged from our verification partner once your identity is confirmed.

Device & Session Management

See every device that's ever logged in, sign out remotely, and get alerted the moment an unfamiliar device tries to access your wallet.

Hover for moreTap to flip

Lost your phone? Sign out of every active session remotely from any other device in seconds - no need to wait for support.

Licensed & Regulated

We operate under proactive compliance in every market we serve, holding your money to the same standards as a regulated institution.

Hover for moreTap to flip

We hold customer funds with regulated banking partners, never in our own operating accounts, and undergo regular independent compliance audits.

How We Keep You Safe

Our dedicated fraud and security teams work around the clock to keep your money safe.

We use two-factor authentication to protect your account from unauthorized access.

We hold your money with established, regulated financial institutions - never in our own operating accounts.

Biometric login means only you can unlock your wallet, even if your phone is lost or stolen.

You're notified instantly the moment anything happens on your account.

We're licensed and held to regulatory standards in every market we operate in.

Regulatory Compliance

MaliSwap operates under proactive identity verification and AML/KYC processes designed to be frictionless while meeting regulatory standards across our operating corridors.

Data Protection

Personal and financial data is encrypted in transit and at rest, with access limited to least-privilege accounts. See our Privacy Policy.

Cybersecurity

HTTPS is enforced sitewide, all admin actions are logged, and login attempts are rate-limited to prevent brute-force access.

AML / KYC Summary

Every account completes identity verification before sending or receiving funds. Full policy: AML/KYC Policy.