Trust & security

1. How we keep you safe

BillSpot is built so that only you can move money from your wallet - and so that a stolen phone or leaked message is not enough on its own.

How we protect accounts

• Secure sign-in - email/phone verification and signed-in sessions over an encrypted connection.
• Transaction PIN - wallet debits (transfers, withdrawals, airtime, bills, and similar) require your PIN. BillSpot staff and support will never ask you for your PIN, password, or OTP.
• Device biometrics / passkeys - where your device supports it, you can unlock with Face ID, fingerprint, or a device passkey instead of typing secrets into chat.
• Session controls - your login session expires; suspicious or blocked accounts cannot move money.

How we protect wallets and payments

• Confirmed actions only - payments are authorised in the app (or via a secure WhatsApp PIN step where offered), not by typing your PIN into a plain chat message.
• No double-charge on retries - if you tap twice or the network retries, we aim not to charge the same confirmed payment twice.
• Amount and frequency limits - checks on how much and how often you can send help reduce fraud and account takeover.
• Licensed payment partners - funding and payouts run through licensed partners; card and bank details are handled under their banking security rules where applicable.

How we protect data

• Encrypted connection - your connection to BillSpot is encrypted.
• Limited staff access - staff only see what they need to run support and operate the service.
• Sensitive fields - credentials (such as PINs) are stored securely, not as plain text; we do not email your PIN or password.
• Monitoring - we watch for abuse, unusual patterns, and service problems.

We do not publish internal diagrams, encryption algorithms, or infrastructure details that would help attackers.

2. Corporate registration

Licences and partners (plain language)

BillSpot is a registered Nigerian company operating a consumer wallet and payments app. Payment collection, virtual accounts, and payouts are provided through licensed payment service partners (including Monnify for Naira virtual accounts).

BillSpot is not a bank. Customer funds movement uses partner infrastructure subject to those partners’ licences and regulators. We do not claim a CBN banking licence on this page.

3. Compliance guidelines

Identity verification (KYC)

• Higher limits and some features require identity checks (for example BVN and government ID / document verification where required). BillSpot does not use face liveness, selfie, or video KYC.
• We may ask for additional information if a transaction or account needs review.
• Incomplete or failed verification can limit withdrawals, cards, or other financial features until resolved.

Anti-money laundering (AML)

• We screen and monitor activity consistent with Nigerian AML expectations and our partners’ requirements.
• Unusual, prohibited, or high-risk activity may be delayed, declined, or reported as required by law.
• We may freeze or restrict accounts while investigating suspected fraud or abuse.

Data protection

• We collect and use personal data to provide the service, meet legal obligations, prevent fraud, and support you.
• We do not sell your personal data.
• See our Privacy Policy for categories of data, retention, and your choices (/policy).

Your responsibilities

• Never share your OTP, password, or transaction PIN with anyone - including people claiming to be BillSpot support.
• BillSpot will never ask for your PIN or password by email, SMS, WhatsApp text, or social media.
• Keep your phone and app updated; use a strong device lock.
• Only download BillSpot from official App Store / Google Play listings.
• Report suspected fraud or phishing immediately.

How to contact us

Related policies

• Privacy Policy - https://billspot.co/policy
• Terms of Service - https://billspot.co/terms

Last updated: 7 August 2026 · BillSpot Digital Limited · RC 8246077 · Nigeria