Security first

How ZVoucher keeps you safe

Security isn't a feature here — it's the product. Here's exactly how your funds, your data and your trades are protected.

Escrow protection

Every trade locks the buyer's funds in escrow before any coupon is handed over. Funds are only released once the coupon is verified, refunded if it's invalid, and auto-refunded if the window expires.

Encryption

Coupon codes are encrypted at rest with AES-256-GCM and never stored or logged in plain text. They're only revealed to the authorized buyer and support for verification. Traffic is served over TLS.

Account security

Passwords are hashed with bcrypt, sessions are signed (httpOnly JWT), and TOTP two-factor authentication is available. Sensitive actions are rate-limited.

Anti-fraud

Coupon codes are fingerprinted to detect reuse, already-used or reported-stolen coupons are blocked, and trades are risk-scored. In-trade chat is monitored to prevent off-platform scams.

Funds & operations

Platform liquidity is split between hot and cold storage, withdrawals can be address-whitelisted, and every action is written to an immutable audit log.

Disputes & anti-fraud

Disputes are arbitrated on evidence by trained staff. No identity verification is required — instead, payout addresses are screened against sanctions lists and every trade is risk-scored.

Found a vulnerability?

We welcome responsible disclosure. Send the details through our contact form and we'll get back to you.

Contact us