CardUp is licensed by the Hong Kong Customs and Excise Department (HKCED) as a Money Service Operator. Our headquarters is also licensed by the Monetary Authority of Singapore (MAS) as a Major Payment Institution under the Payment Services Act for domestic money transfer services, cross-border money transfer services and merchant acquirer services.
PCI-DSS compliant
CardUp does not store your credit card details nor pass them through any servers, and this information is instead managed via a PCI-certified payment gateway.
Safeguarded account
Funds processed through CardUp are held in trust in a safeguarded client money account and do not belong to CardUp. When being delivered to your recipients, these funds are never retained for more than 3 hours.
Account and data security
CardUp protects your data with the same 256-bit encryption that banks use. Data is encrypted at rest and during transit, ensuring your account and payment information are kept safe and secure at all times.
Enhanced with Two-factor authentication
Two-factor authentication (2FA) enhances the security of your account. It prevents anyone else other than you from logging into your CardUp account even if they know your password.
