Limiting the risk of fraudulent transactions
Updated: 2026-09-08
The following controls are always in force.
Card entry
The number of card-entry attempts is limited per customer per hour.
SMS code
The number of SMS-code attempts is limited too. After three wrong codes no further code is accepted or sent for that payment — it cannot be continued, and a new order must be placed.
If the outcome is unknown
If the outcome of a payment is unknown — for example the bank does not answer — the site does not offer to pay again. The order stays in a “being checked” state. We settle the outcome with the bank — usually within a few minutes — and it then appears in your orders list; refresh the page to check. This is what prevents one purchase being paid for twice.
Card number and SMS code
The card number and the SMS code are never kept in a log, in an error message, or in the database.
Bank confirmation
Every payment outcome is confirmed by the bank; we treat a payment as made only on the bank’s answer, never on what the site displayed.
Suspicious transactions
On suspicious transactions we reserve the right, together with the bank, to hold the payment and review it.