Account & Security

Keep your account safe and up to date

IcadPay uses bank-grade security across every layer of the platform. This guide explains how to manage your account settings and what you can do to stay protected.

1How we protect your account

  • 256-bit SSL/TLS encryption on all data in transit
  • AES-256 encryption for sensitive data at rest
  • PCI DSS Level 1 compliance — the highest standard for payment security
  • Two-factor authentication (2FA) available on all accounts
  • Automatic session timeout after inactivity
  • Real-time fraud monitoring with instant alerts

2Account verification levels

Your transaction limits are determined by your verification level:

  • Basic (email verified) — up to ₦50,000 per day
  • Standard (BVN linked) — up to ₦500,000 per day
  • Full KYC (ID + proof of address) — up to ₦5,000,000 per day
  • Business verified — custom limits based on business size

Verification is a one-time process and takes less than 5 minutes.

3Enabling two-factor authentication (2FA)

We strongly recommend enabling 2FA on your account:

  • Log in to your account at portal.icadpay.com
  • Go to Settings → Security
  • Click 'Enable Two-Factor Authentication'
  • Scan the QR code with an authenticator app (Google Authenticator, Authy)
  • Enter the 6-digit code to confirm — 2FA is now active

Frequently Asked Questions

Common questions about account & security

On the login page, click 'Forgot Password' and enter your registered email address. You will receive a reset link within a few minutes. Check your spam folder if it does not arrive. The link expires after 30 minutes.

Log in and go to Settings → Profile. You can update your contact details there. For security, any change to your email or phone number requires verification via OTP sent to your current contact details.

Act immediately: change your password, revoke all active sessions (Settings → Security → Active Sessions), and contact our security team at security@icadpay.com. We will investigate and freeze any suspicious activity within the hour.

No. IcadPay staff will never ask for your password, transaction PIN, or OTP codes. If anyone contacts you claiming to be from IcadPay and asks for these details, it is a scam — report it to security@icadpay.com immediately.

IcadPay does not store full card numbers on our servers. Card data is tokenised by our PCI DSS-compliant payment processor. We only store a non-sensitive token reference that cannot be used to make unauthorised charges.

Yes. You can log in from multiple devices. You can view and revoke individual device sessions at any time from Settings → Security → Active Sessions.

Still have questions?

Our support team is available every day from 8 am to 10 pm.

Live chat

Under 2 min

Email

Under 2 hrs

Phone support

Via portal