The surface is ours to secure. The card data is never ours to hold.
PayMongo channels render the page your customer pays on. Card details travel to the processor you already contract with. This page is the map of what we see, what we store, and what never reaches us.
PLACEHOLDER: global security key visual — the Philippine hero capture shows a peso amount and a regulator's seal, neither of which can appear on this locale
Protection without compromise
PayMongo's security framework combines real-time machine learning and 3D Secure to block fraud before it affects your business. Our adaptive risk parameters ensure every transaction is secure, protecting your revenue and customer trust seamlessly.
How PayMongo secures your transactions
Real-time fraud detection and prevention
Powered by machine learning, our system identifies and stops fraudulent transactions in real-time. It analyzes thousands of signals to stop potential threats from affecting your bottomline.
24/7 protection against BIN attacks and automated threats
Our advanced tools automatically detect and prevent BIN attacks and other automated fraud attempts, providing your business with round-the-clock protection against online threats.
PCI DSS Level 1
The highest merchant-services tier under the Payment Card Industry Data Security Standard. PLACEHOLDER: certification scope — confirm from the Attestation of Compliance whether the channel layer sits inside the assessed scope.
Customizable risk threshold
We know every business has unique security needs. PayMongo offers tailor-fit business rules and risk thresholds, so you can set the level of protection that aligns with your risk tolerance and business model.
Multi-factor authentication (MFA)
Control access to your PayMongo dashboard with multi-layered security. Only verified users can make changes to account details, reducing the risk of unauthorized access.
AICPA SOC examined
PLACEHOLDER: SOC report type, period and scope — the report itself has not been produced to this project, and the badge comes off every page if it does not exist.
Smart technology meets bulletproof security
We take the extra mile to make sure you're always one step ahead of fraud
Risk scores and levels
Each transaction is evaluated and scored against thousands of data combinations. We block potentially fraudulent payments before they reach your account.
Network analysis
Our system connects similar data points across the entire PayMongo network. We spot anomalies and use collective insights to secure your transactions.
Device fingerprinting
We recognize and track the devices used for your transactions, ensuring consistency and alerting you to any suspicious changes in customer behavior.
Transaction pattern recognition
Advanced machine learning analyzes transaction patterns to detect unusual activities, building a line of defense that evolves with every transaction
PayMongo's risk engine is powered by sophisticated machine learning algorithms, running 24/7 to protect your business from fraud. And the best part? There are no additional fees—this high-calibre security comes standard.
<0.1%
Fraud Rate
<0.1%
Dispute Rate
98%
Transactions Approval
What we see, store, and never touch
What we see
- The amount, currency and reference your system sends
- Which method the customer selected
- The state your processor returns
What we store
- Your channel configuration and branding
- A record of each transaction's states, so your systems can be re-notified
- The fields you chose to collect
What never reaches us
- Card numbers. They travel to your processor, not through us
- Your customers' money, at any point in the flow
- Your processor contract, pricing or scheme relationships
Philippine operations
PayMongo is a licensed payments company in the Philippines. That regulatory standing is real, it is specific to that market, and it is stated here rather than implied elsewhere.
Bangko Sentral ng Pilipinas
PayMongo Philippines, Inc. is regulated by the Bangko Sentral ng Pilipinas.
National Privacy Commission
PayMongo's Philippine entities are registered with the National Privacy Commission for their Philippine data processing.
Neither applies to markets outside the Philippines, and neither is offered here as if it did. The risk engine and the rates above are measured on PayMongo's licensed Philippine processing; what travels to your market is the channel layer in front of your own processor.
Reporting something
Security reports go to security@paymongo.com. PLACEHOLDER: disclosure policy — whether a published vulnerability disclosure policy or bounty exists, and where it lives.
