Product
Security at EazuPay
EazuPay signs every API request and callback, restricts API access to whitelisted server IPs, requires one-time passwords for withdrawals and password changes, and keeps an audit trail of admin actions.
Account protection
- Hashed, single-use, five-minute OTPs for password reset, password change and withdrawals
- Limited OTP attempts
- Session sign-out on logout
API protection
- Request signing with your secret key
- IP whitelist for API calls
- Signed callbacks with exact amount checks
- Idempotent settlement — no double credits
Report a problem
If you believe you've found a security issue, contact us on Telegram @eazupay (https://t.me/eazupay) or email qrmflow@gmail.com.
Related pages
Last updated: 30 October 2026