Security and Account Protection
Last updated 27 August 2026
What It Does
Several independent layers sit between an attacker and your money. Each one is designed to fail safely.
Layer 1 — The App PIN
A 5-digit PIN guards entry to the app and every sensitive action. It is stored only as a one-way cryptographic hash, so nobody — including our own staff — can read it, even if our database were exposed. Repeated wrong entries trigger a growing cool-down and eventually a temporary freeze.
Layer 2 — Two-Factor Authentication
Link an authenticator app such as Google Authenticator. Withdrawals require a fresh 6-digit code that changes every 30 seconds. Even someone who knows your password cannot withdraw without your phone. Store your backup codes offline, on paper, not in a screenshot.
Layer 3 — Face and Liveness Verification
For identity verification and certain high-risk actions, we ask for a live face capture that confirms a real person is present rather than a photo held up to a camera.
Device Recognition
We record device model, connection type and approximate location for each session. Your Security Settings list every device with an active session, and you can de-authorise any of them instantly, which kills those sessions everywhere. Any login from a new device triggers an immediate alert.
The Security Account
If our systems see a dangerous pattern — a login from a high-risk source followed by a large withdrawal attempt — the funds move automatically into a locked Security Account. Releasing them requires an enhanced identity check. This is designed to stop a drainer attack in the seconds it is happening. It is a protective hold, and your funds remain yours.
The Rule That Matters Most
Zelencio staff will never ask for your PIN, your two-factor code, or a one-time password. Not in a chat, not on a call, not by email, not on social media. Anyone who asks is attacking you. If you give a code away voluntarily, no security system can protect you, and the loss will be yours.
If Something Feels Wrong
Use the in-app control to lock withdrawals and transfers immediately, then email security@zelencio.com. Speed matters more than certainty — report first, investigate after.