Security Management

COMPREHENSIVE
PROTECTION FOR YOUR
ACCOUNT SECURITY

We have international-leading security certifications and adhere to internationally
recognized standards to establish a security management system and warning
mechanisms, ensuring comprehensive protection for your account security.

Data Security

PCI-DSS

Authoritative Security Certification

We have obtained the highest level of security certification, PCI-DSS Level 1, in the international card payment industry. We strictly adhere to the most stringent data protection PCI compliance requirements in both payment processing and data storage.

Payment Industry Data Security Standards

Privacy Security

ISO 27001

Information Security Management System Standard Certification

In January 2022, we achieved ISO 27001 Information Security Management System certification. With strong encryption measures, we have established a comprehensive information security management system to protect your privacy.

ISO 27001 Robust Privacy Protection Mechanisms

Financial Security

Multiple Measures for Fund Management

RSA Keys & SSL

We use RSA keys and Secure Socket Layer (SSL) for secure encryption, ensuring the safety of your transactions.
Fund Deposit Management

Your funds are held by top international banks and payment institutions, with fund operations conducted in accordance with your instructions and local regulations.
System Security

Our system security complies with the PCI DSS Level 1 international standard, effectively safeguarding transaction data, customer privacy, and account fund security.

Risk Prevention and Control

Utilizing advanced technology and rule-based fund risk management to ensure smooth business operations

Comprehensive Risk Management

Market Risk

We collaborate with top international banks to provide real-time exchange rate services, helping you easily manage market risks such as exchange rate fluctuations.

Operational Risk

We operate funds according to the account holder's instructions and local regulations, continually improving internal compliance procedures to provide reliable services.

Legal Risk

We establish proactive legal risk prevention mechanisms to safeguard business development before entering new markets or expanding into new business areas.

Country Risk

We closely monitor global risk situations and regulatory policy changes, adjusting risk control strategies promptly in response to changing risk factors and formulating effective countermeasures.

Powerful Risk Control Engine

PhotonPay Risk Control Engine utilize machine learning and intelligent matching to provide protection strategies

Before Transaction

Pre-Transaction Verification

Anti-Fraud System

3DS 2.0 Solution

During Transaction

Risk Rating

Dynamic 3DS Decision

Chargeback Alert Service

Custom Blacklists and
Whitelists

After Transaction

Dispute Resolution Control Panel & Real-Time Notifications

Chargeback Appeals

Professional Risk Control
Team Support

Compliance Management

Robust Compliance Management System

Business Compliance

We specialize in the global payment field, thoroughly research
regional laws and regulations, ensuring compliance in business
operations.

Process Compliance

We have a complete compliance risk identification and management
process to ensure compliance in all internal and external processes.

Compliance Culture

We foster a strong compliance culture where compliance concepts
and awareness permeate every work position.

Financial Licenses and Qualification Certifications

Hong Kong MSO License

The Hong Kong Money Service Operator (MSO) license is financial license issued by the Customs and Excise Department of Hong Kong under The Anti-Money Laundering and Counter-Terrorist Financing (Financial Institutions) Ordinance, Cap. 615 (AMLO). This license authorizes an entity to provide currency exchange or fund remittance services in accordance with the stipulations outlined in the license. The Customs and Excise Department oversees and ensures the compliance of the business activities. PhotonPay has successfully acquired the MSO license and has operated in strict compliance with regulatory requirements for several years.

USA MSB Registration

Entities offering money services such as international remittances, foreign exchange, and currency transactions/transfers are required to register as Money Services Businesses (MSBs) in accordance with the regulations outlined in the Bank Secrecy Act (BSA) at 31 CFR 1022.380(a)-(f). This regulatory framework is administered by the Financial Crimes Enforcement Network (FinCEN). PhotonPay has duly registered as an MSB in the United States and has maintained operations in strict compliance with regulatory guidelines for several years.

Canada MSB Registration

Entities engaging in money services, such as foreign exchange, money remittances, the issuance or redemption of money orders, travelers' cheques, or other similar negotiable instruments, as well as dealing with virtual currency, are mandated to register as Money Services Businesses (MSBs). This registration is administered by the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC). PhotonPay has undergone the requisite registration process and is a duly registered MSB in Canada, conducting its operations in full compliance with regulatory standards for several years.

UK API License

The UK Authorized Payment Institution(API) license is issued by the UK Financial Conduct Authority（FCA）. Its primary function is to enable companies to facilitate payment transactions and remittances on behalf of clients. Companies holding the API license are authorized to operate legally in the United Kingdom and the European Union, subject to FCA supervision. PhotonPay has currently obtained approval for the API license.

PCI-DSS LEVEL 1

Highest Security Certification

PhotonPay holds the highest security certification in the international card payment industry, established by founding members of the PCI Security Standards Council (Visa, Mastercard, American Express, Discover Financial Services, JCB, and more). It is the most stringent and highest-level financial data security standard globally. PhotonPay has consistently met and been certified for PCI-DSS Level 1, the most rigorous security audit requirement, for several years.

ISO/IEC 27001:2013

Information Security Management System

ISO 27001 is a widely recognized set of standards for information security management systems. It is considered the most authoritative and stringent international certification standard for information security systems, widely accepted globally. This standard is used to establish and implement information security management within organizations, ensuring comprehensive information security through a management system. PhotonPay obtained ISO 27001 Information Security Management System certification in January 2022.

Compliance Team

Our compliance team consists of experts from top domestic and international banks and payment institutions with over 15 years of industry experience.