Reference

Security Help FAQ Account Protection

Your account runs on verification steps you control — we guide you through login protection, deposit confirmation and withdrawal checks so your wallet stays secure from the first DANA, OVO or GoPay transaction.

Two-Factor LoginWallet VerificationWithdrawal ChecksSession ControlPIN Protection
napi188 Security Help FAQ Account Protection
SECURITY HELP

Security Help Channels

Team online

Verify a Suspicious Login

If you see a login alert for a session you did not start, head to account settings, revoke that device token immediately, then change your password and check that your registered phone number has not been altered without your knowledge.

Check Withdrawal Status

Withdrawals move to manual review when the destination name mismatches or the amount sits outside your normal range. Check the transaction history page for the review timestamp and expected clearance window, usually under two hours during business days.

Report an Unauthorized Deposit

Contact support via live chat with your wallet transaction ID and the DANA, OVO or GoPay reference number. We freeze the credited balance while we trace the source, and reverse it if the deposit came from an account that does not belong to you.

TRUST SIGNALS

How We Maintain Security Standards

SSL Encryption Throughout Every page and API call runs over TLS 1.3 so login credentials, PINs and wallet data stay encrypted between your device and our server. You can verify the padlock icon in your browser bar before entering sensitive information.
Wallet ID Matching We store the wallet account name you registered during verification and compare it against the sender name on every DANA, OVO or GoPay deposit. Transfers from a different name are held for you to confirm or reject manually.
Session Timeout Policy Mobile sessions close after fifteen minutes of no interaction; desktop sessions after thirty. Once expired, you must log in again with your OTP — this limits exposure if you forget to log out on a public device.
Manual Withdrawal Review Our team checks withdrawals that exceed your recent average or target an account name that does not match your profile. Most reviews complete within ninety minutes during weekday hours, adding a human layer against automated fraud attempts.
napi188 How We Protect Your Account & Wallet Access

How We Protect Your Account & Wallet Access

Every login triggers an OTP sent to your registered number — enter it within three minutes and your session opens. Deposits from DANA, OVO or GoPay are matched against your verified wallet ID before funds reach your balance, so only your own transfers clear. Withdrawals require you to confirm the destination account number and re-enter your six-digit PIN; we hold the request

for manual review if the account name does not match your profile or if the amount exceeds your usual pattern. Session tokens expire after fifteen minutes of inactivity on mobile and thirty minutes on desktop, forcing a fresh login if you leave the tab idle. You can view every active session under account settings and revoke any device instantly — useful when

you have logged in from a shared computer or a friend's phone and want to close that access without changing your password.

Security Glossary

01
What is Two-Factor Authentication?

Two-factor authentication combines your password with a one-time PIN sent to your phone, so even if someone learns your password they cannot log in without access to your device and the fresh OTP code.

02
What does Wallet Verification mean?

Wallet verification links your DANA, OVO or GoPay account name to your profile during signup. Future deposits are checked against that name so only transfers from your verified wallet reach your balance automatically.

03
What is a Session Token?

A session token is a temporary credential stored on your device after login. It proves your identity for the next fifteen to thirty minutes without asking for your password again, then expires to keep idle sessions from staying open indefinitely.

04
What does Manual Review mean for withdrawals?

Manual review holds your withdrawal request while a team member checks the destination account details and amount against your usual pattern. It adds a short delay but blocks fraudulent requests that automated checks might miss.

05
What is SSL encryption?

SSL encryption scrambles data traveling between your browser and our server so anyone intercepting the connection cannot read your password, PIN or wallet details. The padlock icon in your address bar confirms the encryption is active.

06
What does Account Takeover Protection mean?

Account takeover protection monitors login attempts from new devices or locations and sends you an alert when a session starts that does not match your normal pattern, giving you a chance to revoke access before damage occurs.

Security Help Questions

Open account settings, tap Security, then toggle on Two-Factor Login. Enter your phone number if it is not already registered, request the verification code, and confirm it. Every login after that will send a fresh OTP to your device.

Withdrawals move to manual review when the destination account name does not match your profile or the amount exceeds your recent average. Our team completes most reviews within ninety minutes during weekday business hours to confirm the request is legitimate.

Yes — go to account settings, tap Active Sessions, and you will see every device with a current token, along with its IP address and login timestamp. Tap Revoke beside any session you do not recognize to close it immediately.

Head to Active Sessions in account settings, revoke the unfamiliar device token, then change your password immediately. Check that your registered phone number and email have not been altered, and contact support via live chat if you need help securing the account.

During signup you register your wallet account name through a small test transfer. Every deposit after that is compared against that verified name; if the sender name does not match, the transfer is held for you to confirm or reject manually before it reaches your balance.

Mobile sessions expire after fifteen minutes of inactivity; desktop sessions after thirty minutes. Once expired, you must log in again with your password and OTP to reopen access, limiting risk if you forget to log out on a shared or public device.
Reference

FAQ Security Help

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.