Security

Secure by architecture, not by promise

The safest place for your money is your bank. So we designed FlazhPay to never touch it — and built verification, biometrics, and on-premise AI around everything else.

We never hold your money

FlazhPay has no wallet. Every payment moves bank-to-bank on NIBSS NIP — the national instant payment rail — initiated by a CBN-licensed partner bank. Your money is only ever in a regulated bank.

Verified before every payment

Every destination — spoken, scanned, photographed, or typed — is checked against NIBSS Name Enquiry. You see the bank's registered account name before you confirm. No payment ever auto-confirms.

You approve, biometrically

Every send is confirmed with your fingerprint or PIN. Your bank authorization is set up once, digitally, with an OTP from your own bank — and you can revoke it at any time through your bank.

AI watching for fraud, quietly

Our fraud engine learns your normal payment behavior and flags anomalies — account takeover, QR spoofing, suspicious patterns — in real time, without ever slowing a legitimate payment.

Real identities, verified

FlazhPay identities are anchored to BVN verification, with optional liveness checks that detect synthetic and AI-generated faces. A verified badge means a real, verified person.

Your data stays in our hands

All FlazhPay AI runs on our own infrastructure. Your transactions, identity records, and behavior are never sent to any external AI provider. Ever.

Data protection

NDPA-compliant by design

FlazhPay is built for the NDPA 2023 data-protection framework from the ground up — not retrofitted for it.

  • Bank details are tokenized and encrypted with AES-256 at rest — no plaintext account data
  • Verification selfies are processed in memory and never written to disk; only a mathematical embedding is kept, which cannot be reversed into your face
  • No transaction or identity data leaves our infrastructure for any third-party AI service
  • Your Trust Score number is visible to you alone — others see only your band
Read our NDPA compliance statement

Security Center

Found a vulnerability or something that doesn't look right? We take reports seriously and respond fast.

security@flazhpay.com

Please include steps to reproduce. We ask that you report privately and give us reasonable time to fix before public disclosure.

How a payment stays safe, end to end

StageWhat happensProtection
InputYou scan, speak, photograph, or type the recipient's detailsNothing moves yet — input only
ResolutionFlazhPay resolves the details to a real bank accountNIBSS Name Enquiry confirms the registered account name
ConfirmationYou review the verified name, bank, and amountUniversal confirmation gate — no payment auto-confirms
AuthorizationYou approve with fingerprint or PINBiometric or PIN required on every send
SettlementMoney moves from your bank to theirsNIBSS NIP rail, initiated by a CBN-licensed bank — FlazhPay never holds funds
AfterwardsReceipt issued, ledger updatedFraud AI reviews patterns asynchronously; disputes can be raised in-app

Security you can verify, not just trust.

Every payment: verified, confirmed by you, settled bank-to-bank.

Create your FlazhPay ID For Businesses