Built on the same rails regulated money runs on
Here’s exactly how your money and identity are handled. Not a promise, a description.
- 01Your card number never touches our servers
Card issuance and tokenization happen at our licensed issuing partner. We store references, never the raw PAN or CVV.
- 02Identity verification by Sumsub
KYC/AML checks run through a dedicated identity verification provider, independent of the issuing partner.
- 03Cards issued by a licensed issuing partner
Magic Pay operates under our partner’s licensing and compliance program. We don’t claim a banking license of our own.
- 04Top-ups are credited only after network confirmations
Funds are credited after 20 network confirmations and only from the address of the current request — mistaken and double credits are ruled out.
- 05One ledger, no silent writes
Every balance change is a recorded ledger entry. Nothing updates your balance without leaving a trace.
How your card is protected
Freeze in one tap
Freeze a card in the app and every payment is declined immediately. Unfreeze just as fast. No calls, no waiting.
Payment toggles
Switch online payments, contactless and ATM withdrawals on or off separately. Turn on only what you actually use.
3-D Secure by email
Online purchases at participating merchants are confirmed with a one-time code sent to your email. A payment can’t be completed without that code.
A notification for every transaction
A push or email for each payment, top-up and decline. If you see something you don’t recognize, freeze the card right away.
Password and confirmation codes
Sign-in and transactions are confirmed with one-time codes sent by email. Use a unique password and keep it to yourself; biometric sign-in and two-factor authentication are planned.
Replacement without losing funds
A lost card is canceled, a new one is issued, and the balance stays on your account.
If your card is lost or stolen
- Freeze the cardOpen the app and tap “Freeze”. This is the first and most important step: payments stop immediately.
- Check your transactionsLook through your recent transactions. If any aren’t yours, report them to support in the app with the date and amount.
- Order a replacementThe old card is canceled permanently, a new one is issued, and your balance is untouched.
What we’ll never ask you for
Magic Pay will never — by phone, in a messaging app, by email or on social media — ask you for:
- your card PIN;
- your full card number and CVV;
- the seed phrase or private keys of your crypto wallet;
- a one-time code from an email or SMS;
- your app password;
- a transfer to an address sent in a message. A top-up address exists only inside the app, in your current top-up.
Report a security issue
If you’ve found a vulnerability in our website or app, we want to hear from you. Contact details for security researchers and the disclosure process are published in our security.txt. Please report responsibly and give us a reasonable time to fix the issue before making it public.