Specific enough to be useful when someone is about to email you asking for a bank login.
We will never ask for
·A full card number, in any channel.
·Online banking credentials, a password, or a one-time passcode.
·Payment to an individual, or to any account other than one AltirasPay has given you in writing.
·If you receive a request like that claiming to be from us, do not reply. Tell us using the complaint process.
Sending documents
·Use the secure upload in your merchant portal wherever possible. Documents sent that way are stored in a private location with access limited to the people working on your application.
·Avoid email for identification documents and bank statements. If you have already sent something by email, tell us and we will handle it appropriately.
How documents are handled
·Stored privately, never in a publicly addressable location.
·Access is limited by role, and every access is attributable.
·Retained for the periods applicable law and Provider requirements call for, then deleted.
·Documents that were reviewed and not accepted remain on file as part of the application record rather than being deleted — that history is what shows a decision was made properly.
