Security
How we protect your account and your data
Security is part of how Pursible is built, from verifying who you are to protecting every payment you make. Here is what we do, in plain terms.
Identity verification
- Every account is verified before it can receive or move money.
- BVN and NIN are checked electronically against government records, and a live selfie confirms the person signing up is the person on the record.
- Tier 2 adds a government-issued photo ID matched to your BVN or NIN, a live selfie and sanctions screening. Tier 3 adds recent proof of address, enhanced due diligence questions and up-to-date anti-money-laundering screening.
- When an automated check is unclear, a trained member of our team reviews it before anything is approved.
Encryption
- All connections to Pursible use HTTPS, so data is encrypted in transit.
- Your BVN and NIN are encrypted at rest with AES-256-GCM. The app and our staff only ever see a masked version, such as *******1234.
- Identity documents and selfies are kept in private storage, and can only be opened through short-lived links by authorised staff.
- Passwords and transaction PINs are never stored. We keep only a one-way bcrypt hash of each.
Account protection
- Every withdrawal needs your transaction PIN, separate from your password.
- After five wrong PIN attempts in a row, PIN actions are locked for 30 minutes, even with your password.
- Withdrawals go only to bank accounts you have added, and large or unusual withdrawals can be held for review.
- If something looks wrong, our team can freeze an account while it is investigated.
Audit trails
- Sensitive actions are recorded in an audit log: PIN changes and failed attempts, withdrawals, verification decisions, and staff changes to accounts.
- Every time a member of staff opens your identity documents, that is recorded too.
- Staff cannot approve their own verification or their own withdrawals.
Your data
- We collect only what we need for each tier, and keep it only as long as the law requires.
- The website uses no tracking or advertising cookies, and no third-party analytics.
Report a security issue
If you think your account has been accessed without your permission, or you have found a security problem, email support@pursible.com with the subject “Security”. Never share your password or PIN with anyone, including Pursible staff. We will never ask for them.