Security

Last updated: May 2026

CheckoutPay is built so businesses can collect and manage payments with confidence. This page summarises our security posture in plain language. It is not an exhaustive technical specification.

Our approach

We apply industry-recognised controls for a cloud payment platform: secure transport, access controls, monitoring, and responsible change management. Security is reviewed on an ongoing basis as threats and standards evolve.

Accounts and authentication

Business accounts are protected by sign-in credentials you control. Use a strong, unique password, enable any additional protections we offer, and restrict who on your team can access financial settings. Never share one-time codes or recovery links with anyone claiming to be support.

Payments and settlement

Payment experiences are designed to reduce exposure of sensitive data in browsers and apps. Settlement and safeguarding of funds are handled in line with applicable Nigerian regulatory requirements through our regulated partner arrangements (see our Privacy Policy for the role of MetroOven Innovations).

Your responsibilities

  • Keep devices and browsers up to date.
  • Verify you are on the genuine CheckoutPay site before signing in.
  • Report suspected unauthorised access to your account immediately via official support channels.
  • Train staff on phishing and social engineering.

Incident reporting

If you believe a vulnerability affects CheckoutPay, contact us through the official support route published on this website. Please provide enough detail for us to reproduce and investigate. Do not perform intrusive testing without written authorisation.

Changes

We may update this page to reflect material improvements or clarifications. The “Last updated” date will change when we do.

Security FAQs

See all FAQs including search for WordPress, API, and developer program topics.

How does CheckoutPay protect merchant and customer data?

We use HTTPS everywhere, secure credential storage for API keys, and access controls in the business dashboard. See https://www.check-outnow.com/support and our security page for practices and reporting channels.

What KYC documents do businesses need?

Verification requirements depend on your business type and volume. The dashboard guides you through identity and business documents needed to unlock full features.

How should I report suspected fraud?

Use our fraud awareness resources and contact https://www.check-outnow.com/contact immediately with transaction references. Never move money based on unsolicited WhatsApp or email instructions.

Are API keys revocable?

Yes. Rotate or revoke keys from the business dashboard if exposed. Update your live integrations promptly after rotation.

Where is customer card or bank data stored?

CheckoutPay is bank-transfer-first for many flows. Sensitive operations use secure pages; merchants should not store full account passwords or PINs.

Is CheckoutPay licensed or regulated?

We operate under applicable Nigerian financial services and partnership arrangements required for our products. Specific licensing details are available on request for enterprise merchants.

CheckoutPay Support