We keep your money safe and secure
Making sure your money, and personal information is in safe hands is our top priority. Here’s what we’re doing to ensure security and reliability of your KOHO account.
Your money
Cash deposits
We work hard to make sure your money is always safe and available, that’s why we’ve partnered with Peoples Trust, a federally regulated bank, to safeguard your funds. And once you opt-in to Earn Interest, up to $100K of your funds are eligible for CDIC protection.
KOHO infrastructure
KOHO has invested in top tier cybersecurity to help protect your account from the evils of the internet. This includes proper firewalls, endpoint detection and response, and 24/7 security monitoring, among other things.
Mastercard Zero Liability
With a KOHO account you’ll get a prepaid, reloadable Mastercard that’s protected under Mastercard’s Zero Liability Protection.
Your account security
Account Authentication
Your account is secured with Face ID, device biometrics, password, or passcode.
Need to reset your password? We'll use two factor authentication to validate your identity.
Lock your card
If you lose or have your card stolen, you can lock it immediately in the app so it can’t be used.
Account Monitoring
We’ve got a team actively monitoring the dark web and open source websites for compromise.
Remember, security is a shared responsibility.
Find out what you can do to secure your account.
Learn MoreYour data
Encryption
Anytime your data is being transmitted from the KOHO app or webpage back to KOHO, that data is encrypted using TLS 1.2. All your personal data is stored within our databases with AES-256. This helps ensure that none of your data can be read by anyone that is not authorized.
User validation
KOHO has embedded technology that helps validate your identity. We’ll do this when you sign up for an account so you get access to all features.
Compliance and regulation
The technical stuff that really matters.
SOC 2, Type 2
This is a third party report conducted by an auditor assuring that KOHO’s controls on security, availability, processing integrity, confidentiality, and privacy are sufficient.
Payment Card Industry Data Security Standard (PCI DSS)
Your payment card data is securely stored away in a dedicated environment that’s audited annually by a PCI Qualified Security Assessor (QSA). PCI DSS provides a baseline of technical and operational requirements designed to protect account data.
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
FINTRAC is Canada's financial intelligence unit. Its mandate is to facilitate the detection, prevention and deterrence of money laundering and the financing of terrorist activities, while ensuring the protection of personal information under its control. KOHO is regulated as a Money Service Business (MSB) by FINTRAC.
KOHO MSB Registration Number: M15656297
Got a question? Email us at security@koho.ca. We’d be happy to chat!
Have a security problem that needs reporting?
Click here for our Vulnerability Disclosure Program.