Our Security Approach

At Fanum Pay, security isn't just a feature — it's the foundation of everything we build.

🔐

Security First Design

Fanum Pay was built from the ground up with security and privacy as core principles. Our proprietary architecture implements multiple layers of protection while ensuring a frictionless user experience.

✓ PCI Level 1 compliant via Stripe
✓ Banking-grade encryption
✓ No sensitive data stored on our servers

Fanum Technology

Our proprietary Fanum system enables identity-masked transactions, providing an additional layer of privacy when needed. This innovative approach allows for secure payments while maintaining appropriate compliance with financial regulations.

Multiple Layers of Protection

🔑

Secure Key Architecture

Every transaction uses a unique cryptographic security key that's embedded in the URL. These keys are generated using secure random algorithms and are practically impossible to guess or brute force.

Technical Detail:

32-byte cryptographically secure random keys with automatic expiration and one-time use validation.

đŸ›Ąī¸

Data Protection

All sensitive payment data is handled directly by Stripe's secure infrastructure. Card details are tokenized and never touch our servers, ensuring complete PCI DSS compliance.

Technical Detail:

End-to-end encryption with HTTPS, all data encrypted at rest, and secure API communication with tokenization.

🔍

Fraud Prevention

Automated systems continuously monitor for suspicious activity. Our backend implements rate limiting, IP tracking, and advanced fingerprinting to prevent automated attacks.

Technical Detail:

Custom Rust-based fingerprinting and validation, combined with Stripe's advanced fraud detection systems.

How It Works: Technical Flow

  1. 1ī¸âƒŖ

    Secure Unique Payment URL

    Each transaction generates a unique, expiring payment URL (e.g., fanumpay.com/?abc123def...) that routes to a secure hosted form. This URL contains a cryptographic key that links to the specific transaction in our database.

  2. 2ī¸âƒŖ

    Credit Card Processing

    The payment form uses Stripe Elements via a server-side API (never directly exposing keys to the browser). Card details are tokenized and never touch our servers, ensuring PCI DSS compliance. This approach provides bank-level security for all transactions.

  3. 3ī¸âƒŖ

    Payout Routing

    Funds are briefly held in escrow (application fees may apply). They are then disbursed to the recipient's connected bank account or debit card using Stripe Connect Custom Accounts or Instant Payouts, depending on account setup. This ensures funds move securely and quickly.

  4. 4ī¸âƒŖ

    Identity & Fraud Checks

    Optional KYC/KYB verification is implemented via Stripe's built-in verification systems. Basic fingerprinting and anti-abuse checks are done using a custom Rust-based backend for high-speed validation. This balances security with privacy and user experience.

  5. 5ī¸âƒŖ

    Metadata & Tracking

    Every transaction includes metadata (e.g., referral source, contact info, purpose) allowing for detailed reporting. All data is encrypted at rest and transmitted over HTTPS, ensuring complete confidentiality throughout the process.

Infrastructure & Technology

đŸ–Ĩī¸ Technology Stack

  • â€ĸ
    Frontend: Plain HTML/JS + TailwindCSS, optimized for speed and security
  • â€ĸ
    Backend: PHP for core functions with Stripe API integration
  • â€ĸ
    Database: MariaDB with encrypted sensitive fields
  • â€ĸ
    Caching: Optional Redis for high-speed transaction processing
  • â€ĸ
    Email: Mailgun secure API for transactional emails

🔒 Security Measures

  • â€ĸ
    End-to-end HTTPS: All communication is encrypted
  • â€ĸ
    Stripe tokenization: No card data stored on our systems
  • â€ĸ
    CSRF tokens: Protection against cross-site request forgery
  • â€ĸ
    IP/user-agent checks: Fraud prevention and monitoring
  • â€ĸ
    Email/SMS confirmation: Optional verification for high-value transactions

Why Fanum Pay Is Safe

  • ✓
    Stripe is PCI Level 1 certified

    We leverage Stripe's industry-leading security infrastructure for all payment processing.

  • ✓
    No sensitive data on our servers

    All payment information is handled directly by Stripe via secure APIs.

  • ✓
    Transparent and traceable

    Every transaction is timestamped, logged, and traceable for auditing or dispute resolution.

  • ✓
    Minimal attack surface

    Our no-user-login design philosophy reduces traditional attack vectors like account takeovers.

  • ✓
    Advanced security features

    From secure keys to fraud monitoring, we implement multiple layers of protection.

  • ✓
    Continuous monitoring

    Our systems actively monitor for unusual patterns and suspicious activities.

Security FAQ

Are my credit card details safe?

đŸ”Ŋ

What if someone gets hold of my payment link?

đŸ”Ŋ

Is my personal information secure?

đŸ”Ŋ

Have Security Questions?

Our team is happy to discuss our security measures in more detail.

Contact Our Security Team