Skip to main content
Protecting our customers’ accounts and data is our priority. If you believe you have found a security vulnerability in any EMIDPAY website, application or service, we want to hear from you.

​
📧 How to report

Email security@emidpay.com and include:
  • a description of the vulnerability and its potential impact
  • the affected URL, application or service
  • step-by-step instructions to reproduce the issue
  • screenshots, logs or a proof of concept, if available
  • how we can contact you for follow-up questions
Please do not include real customer data in your report.

​
🔄 What happens next

  • We acknowledge your report within 3 business days.
  • We investigate every report and keep you informed of our progress.
  • Once the issue is fixed, we let you know. With your permission, we are happy to credit you for the discovery.

​
📏 Guidelines

When researching and reporting, please:
  • do not access, modify or delete data that does not belong to you
  • do not perform denial-of-service attacks, spam or social engineering against our staff or customers
  • do not use automated scanners in a way that degrades our services
  • do not disclose the vulnerability publicly until we have confirmed it is resolved
We will not pursue legal action against anyone who reports a vulnerability in good faith and follows these guidelines.

​
🚫 Out of scope

  • Questions about your account, payments or verification. Please contact us instead.
  • Vulnerabilities in third-party services that we do not control. Please report these to the vendor directly.
We do not currently run a paid bug bounty programme.