Security Questions for Unauthorized Access Prevention

As stated in the article above, there is no two-factor authentication on FunPay ("login using SMS authentication"). In fact, it has been replaced by a system we developed. It may ask you to answer several security questions in case of suspicious account activity (for example, access from a new city).

Our system may also ask your phone number or credit/debit card number that was previously used on your account.

Sometimes we receive questions regarding the safety of this data and the legitimacy of asking such questions, since storing a credit/debit card number is against Payment Card Industry Data Security Standards (PCI DSS).

We would like to make it clear that we do not store sensitive customer data, but only a hash function from it. 

Accordingly, when checking, the data you enter is hashed, then it is compared with the hash saved, and if it matches, the check is completed.

Thus, you can be sure your data is safe.