We keep your money safe and secure

Making sure your money, and personal information is in safe hands is our top priority. Here’s what we’re doing to ensure security and reliability of your KOHO account.

KOHO Cyber Security

Your money

Cash deposits

We work hard to make sure your money is always safe and available, that’s why we’ve partnered with Peoples Trust, a federally regulated bank, to safeguard your funds. And once you opt-in to Earn Interest, up to $100K of your funds are eligible for CDIC protection.

KOHO infrastructure

KOHO has invested in top tier cybersecurity to help protect your account from the evils of the internet. This includes proper firewalls, endpoint detection and response, and 24/7 security monitoring, among other things.

Mastercard Zero Liability

With a KOHO account you’ll get a prepaid, reloadable Mastercard that’s protected under Mastercard’s Zero Liability Protection.

Your money is safe and secure with a KOHO account

Your account security

Account Authentication

Your account is secured with Face ID, device biometrics, password, or passcode.

Need to reset your password? We'll use two factor authentication to validate your identity.

Lock your card

If you lose or have your card stolen, you can lock it immediately in the app so it can’t be used.

Account Monitoring

We’ve got a team actively monitoring the dark web and open source websites for compromise.

Remember, security is a shared responsibility.

Find out what you can do to secure your account.

Your data


Anytime your data is being transmitted from the KOHO app or webpage back to KOHO, that data is encrypted using TLS 1.2. All your personal data is stored within our databases with AES-256. This helps ensure that none of your data can be read by anyone that is not authorized.

User validation

KOHO has embedded technology that helps validate your identity. We’ll do this when you sign up for an account so you get access to all features.

Compliance and regulation

The technical stuff that really matters.

SOC 2, Type 2

SOC 2, Type 2

This is a third party report conducted by an auditor assuring that KOHO’s controls on security, availability, processing integrity, confidentiality, and privacy are sufficient.

PCI Compliance

Payment Card Industry Data Security Standard (PCI DSS)

Your payment card data is securely stored away in a dedicated environment that’s audited annually by a PCI Qualified Security Assessor (QSA). PCI DSS provides a baseline of technical and operational requirements designed to protect account data.


Financial Transactions and Reports analysis Centre of Canada (FINTRAC)

FINTRAC is Canada's financial intelligence unit. Its mandate is to facilitate the detection, prevention and deterrence of money laundering and the financing of terrorist activities, while ensuring the protection of personal information under its control. KOHO is regulated as a Money Service Business (MSB) by FINTRAC.

KOHO MSB Registration Number: M15656297

Got a question? Email us at [email protected]. We’d be happy to chat!

Have a security problem that needs reporting?

Click here for our Vulnerability Disclosure