Five Links in the Chain, and Only One Is Yours

The five links

• 1

  TransportWhether traffic between the app and the server is encrypted. Not stated.

• 2

  StorageHow balances, personal data and documents are held. Not stated — and a full identity package is collected.

• 3

  Access controlWhether staff access is limited and logged. Not stated.

• 4

  RecourseWhat happens if something goes wrong. No complaints route, no regulator, no licence.

• 5

  Your device and numberThe only link you control, and the one most often broken — because a one-time code makes the phone the account.

The claim the operator does make

Two, and neither is a security statement. It describes itself as an “ISO Certified Company” and promises a “100% Secure Fair Play Policy”. The second is a sentence it wrote about itself. The first refers to a real family of management-system standards and says nothing about how a balance is held, who can see it, or what happens if it disappears.

Neither claim carries a certificate number or an issuing body, so neither can be checked. That is the same pattern as the licence question, where no regulator, authority or number appears anywhere.

The link you can actually strengthen

Do not share the handset or the number. Turn off message previews, so a code cannot be read from a locked screen. Keep the number you registered with, because changing it is the failure mode with no published remedy. And treat the application itself as untrusted software from an unreviewed source, because that is what a direct download is.

None of that improves the four links above it. It only removes the easiest way in, which is worth doing precisely because the harder ways are undescribed.

The honest limit of this page

We cannot tell you whether this operator’s systems are secure. Nobody outside can, and anybody claiming to has not checked either. What can be stated is that none of the ordinary evidence exists: no security statement, no certificate, no regulator and no recourse.

Where an account cannot be secured to your satisfaction, the remaining control is to close it — and what that involves is also unpublished. The overview explains how each claim here was sourced.