Will the Canada Post strike affect our instant virtual cards? Never. Tap away.
We keep your money
safe and secure
Making sure your money, and personal information is in safe hands is our top priority. Here’s what we’re doing to ensure security and reliability of your KOHO account.
Your money
Cash deposits
We work hard to make sure your money is always safe and available, that’s why we’ve partnered with Peoples Trust, a federally regulated bank, to safeguard your funds. And once you opt-in to Earn Interest, up to $100K of your funds are eligible for CDIC protection.
KOHO infrastructure
KOHO has invested in top tier cybersecurity to help protect your account from the evils of the internet. This includes proper firewalls, endpoint detection and response, and 24/7 security monitoring, among other things.
Mastercard Zero Liability
With a KOHO account you’ll get a prepaid, reloadable Mastercard that’s protected under Mastercard’s Zero Liability Protection.
Your account
security
Account Authentication
- Your account is secured with Face ID, device biometrics, password, or passcode.
- Need to reset your password? We'll use two factor authentication to validate your identity.
Two-Step Verification
- An extra security step to keep your account safe. So even if someone has your details they won’t be able to access your account.
Lock your card
- If you lose or have your card stolen, you can lock it immediately in the app so it can’t be used.
Account Monitoring
- We’ve got a team actively monitoring the dark web and open source websites for compromise.
Your data
Encryption
Anytime your data is being transmitted from the KOHO app or webpage back to KOHO, that data is encrypted using TLS 1.2 or higher. All your personal data is stored within our databases with AES-256. This helps ensure that none of your data can be read by anyone that is not authorized.
User validation
KOHO has embedded technology that helps validate your identity. We’ll do this when you sign up for an account so you get access to all features.
Compliance and regulation
The technical stuff that really matters.
SOC 2, Type 2
This is a third party report conducted by an auditor assuring that KOHO’s controls on security, availability, processing integrity, confidentiality, and privacy are sufficient.
Payment Card Industry Data Security Standard (PCI DSS)
Your payment card data is securely stored away in a dedicated environment that’s audited annually by a PCI Qualified Security Assessor (QSA). PCI DSS provides a baseline of technical and operational requirements designed to protect account data.
Financial Transactions and Reports analysis Centre of Canada (FINTRAC)
FINTRAC is Canada's financial intelligence unit. Its mandate is to facilitate the detection, prevention and deterrence of money laundering and the financing of terrorist activities, while ensuring the protection of personal information under its control. KOHO is regulated as a Money Service Business (MSB) by FINTRAC.
KOHO MSB Registration Number: M15656297
Have you found a vulnerability within the KOHO platform?
We leverage HackerOne for our vulnerability disclosure program.