Account and Payment Security

Keeping your account and payments safe and secure

We take the security of your identities and payments as top priority.

Licensed by the regulatory bodies

CardUp works closely with payment partners licensed by Bank Negara Malaysia. Additionally, CardUp's headquarter is licensed by the Monetary Authority of Singapore (MAS) as a Major Payment Institution under the Payment Services Act for domestic money transfer services, cross-border money transfer services and merchant acquirer services. CardUp is also a registered Visa Business Payments Solution Provider (BPSP) in Malaysia.

PCI-DSS compliant

CardUp does not store your credit card details nor pass them through any servers, and this information is instead managed via a PCI-certified payment gateway.

Safeguarded account

Funds processed through CardUp are held in trust in a safeguarded client money account and do not belong to CardUp. When being delivered to your recipients, these funds are never retained for more than 3 hours.

Enhanced with Two-factor authentication

Two-factor authentication (2FA) enhances the security of your account. It prevents anyone else other than you from logging into your CardUp account even if they know your password.

Find out how it works >

Account and data security

CardUp protects your data with the same 256-bit encryption that banks use. Data is encrypted at rest and during transit, ensuring your account and payment information are kept safe and secure at all times.