Security by design
At Mamo, we value our customers' privacy and security
Security by design is an approach at Mamo that makes our systems free of vulnerabilities through continuous testing, authentication safeguards, and an adherence to the best programming practices and industry standards for your peace of mind.
We protect access to your account and login using face or fingerprint identification recognition, native to your mobile device. You can also use your existing single sign-on (SSO), like Google and Apple, for a seamless login experience, avoiding unnecessary passwords.
All your account details are fully encrypted whether they’re in-transit or at-rest and are stored on information servers in secure locations. In-transit data protection safeguards your data while it travels from network to network. At-rest data protection helps secure static data on your device that is not moving from device to device/network.
Fraud prevention and protection
At Mamo, fraud prevention and protection provides a seamless user experience while ensuring your money is safe. Every transaction is scored for risk with our internal fraud engine to instantly flag, monitor and investigate suspicious activity.
Identity verification ensures that there is a real person behind a new registration while proving that they are who they claim to be. It prevents anyone from carrying out transactions on other users' behalf without authorization, creating false identities, or committing fraud. At Mamo, all our users must scan their government-issued ID, verified by taking a selfie and provide proof of address and occupation information.
Our risk assessment includes potential threats, the likelihood of occurrence, how quickly threats are detected, and how much it will cost users and Mamo. Our security systems monitor all transactions in real-time to block any suspicious activity.
Benefit from extra protection against fraud with advanced 3D Secure (3DS). 3DS technology offers an additional PIN code authentication step when using a card, significantly reducing misuse of cards and loss of payments. 3D stands for "three domains." The first is the card issuer; the second is the retailer receiving the payment; the third is the 3DS infrastructure platform that acts as a secure go-between for the consumer and the retailer.
Instant push notifications
At Mamo, we use real-time push notifications to provide an informative experience and allow users to always stay up-to-date on transactions.
Regulated by the DFSA
Mamo Limited is regulated by the Dubai Financial Services Authority ("DFSA"), with registration number F005922, for Providing Money Services under an Innovation Testing Licence ("ITL"). This allows Mamo to test its products and services under restricted conditions defined by the DFSA. We endeavour to always keep your safety and security front and center, however, it's important to know that in the extreme and rare event of loss, clients are limited in their rights during this phase of our licence. For your peace of mind and to learn more visit the DFSA Public Register.
Our commitment to data privacy
We will never rent or sell your information or data to anyone. We will use your data for legitimate purposes only while safeguarding your privacy.
At Mamo, subject to your consent if required by law, we collect personal information as relevant and as is voluntarily supplied to us by users. We will never provide any user information to anyone unless explicitly agreed by you. We are committed to ensuring that your data is held responsibly, safely, and privately. We never sell your data to third parties.
What's more, Mamo is subject to the Dubai International Financial Centre's ("DIFC") Data Protection Law and Regulations, which govern how we handle your data. Your rights in respect of the data we may hold.
Certifications and attestations
For your protection and peace of mind, at Mamo, we use industry-standard certification and attestation to maintain a high level of security certified and attested by third parties, further demonstrating our commitment to security and privacy.
We are PCI DSS compliant.
SSL is a cryptographic protocol designed to provide communications security between computer networks through HTTPS protocols.
Keep yourself safe
We will never ask you for your password or PIN, so to protect yourself from online fraud, never share this with anyone. Avoid clicking on links in emails or text messages that seem suspicious, which might be someone's attempt to get your password or login details through deceptive emails, text messages, or fake websites. We take fraudulent activity very seriously and are always on hand to assist. If you think your account's security is compromised, inform us immediately by contacting our support team at firstname.lastname@example.org.
If you are a security researcher and would like to report a vulnerability you've found, please contact us at email@example.com.
We're always here to help
If you have any questions or want to learn more about security at Mamo Pay, you can find more information in our FAQs