Security
Your money, defended in layers
Security isn't a premium feature here. Every protection below applies to every account, from the first dollar.
Encryption everywhere
Every connection uses 256-bit TLS. Data at rest is encrypted, and identity documents sit in private storage that only our compliance team can open.
Two-factor authentication
Turn on 2FA and a one-time code is required on every new device. Available on every account at no cost.
Transfer PINs
Every outbound transfer needs a 4-digit PIN that only you know. It is stored hashed — we could not tell you what it is if we wanted to.
Continuous monitoring
Unusual patterns are flagged in real time and held for review before the money moves, rather than apologised for afterwards.
Audited infrastructure
SOC 2 Type II certified, with penetration testing twice a year by an independent firm and a published disclosure policy.
Deposit insurance
Balances are insured up to $250,000 per depositor through our partner custodian.
NexaCapital will never…
If anyone contacts you claiming to be us and does any of these, it is a scam. Hang up and call +1 (800) 555-0142.
- Ask for your password
- Ask for your transfer PIN
- Ask for a verification code
- Ask for your card CVV
- Ask you to move money to a “safe account”
- Ask you to install remote-access software
We will occasionally ask you to confirm your identity when you call us — but never by asking for a full password, PIN or code. If in doubt, hang up and call the number on the back of your card.
Found a vulnerability?
We run a responsible disclosure programme and we do not threaten researchers. Email security@nexacapital.com with the details and we will acknowledge within one business day.