Security
What we do to protect your account and your money, and how to tell us about a problem.
Mytalu (Zambia) Limited is licensed by the Bank of Zambia (PSC No. 09/PSB/2023).
Customer money is held in trust accounts at licensed banks in Zambia, separate from Mytalu's own money.
Every payment from your Mytalu wallet needs your PIN. Never share it with anyone, including someone who says they work for Mytalu.
Our apps, this website and our APIs only talk to our servers over HTTPS (TLS), so your data is encrypted in transit.
Business accounts can require a second person to approve every payment before money moves. Once it's on, it can only be turned off by contacting support.
You can freeze and unfreeze your Mytalu virtual Mastercard in the app at any time, and you need your PIN to reveal the card details.
If you think you've found a security problem in Mytalu, email hello@mytalu.io with “Security” in the subject. Tell us what you found, where, and how to reproduce it. Please don't access other people's data or disrupt the service while testing, and give us a chance to fix the issue before sharing it publicly.
Lost your phone, or seen a payment you don't recognise? Contact us straight away by email or on WhatsApp.
Read how we handle your data in our Privacy Policy.