MiFinity complies with PCI DSS Service Level 1 regulations so you know our systems are regularly audited and secure.
Our eWallet and all transactions are encrypted and secured with SSL (Secure Socket Layer) technology which protects your information and data.
Our IT systems are protected by state-of-the-art firewalls which build a barrier between the internet and our internal systems. To log into our secure eWallet you need to register with a unique username/email address and a secure password.
MiFinity has introduced Strong Customer Authentication (SCA) in line with the Payment Services Directive (PSD2), this is a new European regulatory requirement to reduce fraud and make online payments more secure.
After a period of inactivity on your eWallet, you will automatically be logged out and will be required to reenter your username or email address and password.
Account Takeover Fraud
An account takeover can happen when a fraudster or cybercriminal poses as a genuine customer, gains control of an account and then makes unauthorised transactions. Here are some common types of security threats:
Phishing
Phishing emails are where criminals impersonate reputable companies in an attempt to acquire private or sensitive information such as your eWallet username and password, credit card details, and other personal details.
SMSishing
A form of phishing that uses mobile phone SMS, text messages or other messaging apps to trick the targeted user into providing sensitive information. These messages typically ask you to reply to the message or call a fraudulent contact number.
Whaling
Type of spear phishing that targets high-level executives or other high-profile individuals. These individuals are often more likely to have access to sensitive information, making them a valuable target for attackers.
Vishing
This attack uses phone calls to trick victims into giving up their personal information. The attacker will often pose as a representative from a legitimate company, and ask the victim to verify their personal information.
Pharming
Pharming attacks use fake websites to capture a victim’s personal information. The attacker redirects a legitimate website to fraudulent one which is designed to mimic the real one.
Never share your account credentials, including username, password, 2FA verification code.
If using a web browser ensure the connection is secure. A closed padlock icon denotes a secure https connection.
Be vigilant and do not open email attachments from people you do not know.
Check your transaction history on a regular basis. If you notice suspicious activity please change your account password and contact Customer Services immediately.
If using the MiFinity mobile app, please ensure you are running the latest version. This can be found in the Apple App store or on Google Play.