Security and Fraud Prevention Policy
Security and Fraud Prevention Policy
Lux Pay Digital Services S.r.l.
1. Introduction
Lux Pay Digital Services S.r.l. adopts high security standards to protect:
- customer data
- customer funds
- financial transactions
- IT systems
The Company implements technical, organizational, and procedural measures to prevent, detect, and manage fraudulent or unauthorized activities.
Security policies are developed in compliance with:
- Regulation (EU) 2016/679 (GDPR)
- PSD2 Directive (EU 2015/2366)
- Italian Legislative Decree 231/2007 (Anti-Money Laundering)
- MiCA Regulation for crypto-assets
- international cybersecurity standards
2. Security Measures
Lux Pay implements various security measures to ensure the protection of systems and information.
2.1 IT Systems Security
The Company uses:
- secure cloud infrastructures
- advanced encryption systems
- firewalls and network protection systems
- continuous monitoring of system activity
Systems are designed to prevent unauthorized access and protect sensitive data.
2.2 Data Encryption
Sensitive data are protected using encryption technologies, including:
- encryption of data in transit
- encryption of stored data
- TLS/SSL security protocols
2.3 Strong Customer Authentication (SCA)
In accordance with the PSD2 Directive, Lux Pay uses Strong Customer Authentication (SCA).
This may include:
- password authentication
- one-time passwords (OTP)
- biometric authentication
- two-factor authentication (2FA)
3. Fraud Prevention
Lux Pay uses advanced systems to detect and prevent fraudulent activities.
3.1 Transaction Monitoring
Transactions may be monitored using automated systems that analyze:
- suspicious transaction patterns
- unusual behaviors
- unauthorized access attempts
3.2 Anti-Fraud Systems
The Company uses technological tools to detect:
- financial fraud
- identity theft
- money laundering activities
- unauthorized access
3.3 AML Controls
In compliance with anti-money laundering regulations, Lux Pay implements:
- customer identity verification (KYC)
- transaction monitoring
- reporting of suspicious transactions to competent authorities
4. Account Security
Users are responsible for protecting their login credentials.
Users must:
- keep passwords confidential
- not share security codes
- use secure devices
- report suspicious access immediately
5. Reporting Suspicious Activity
If a user suspects unauthorized use of their account, they must immediately contact Lux Pay support.
Reports may be sent to:
support@lux-pay.co
The Company may temporarily suspend an account for security reasons.
6. Protection Against Phishing and Scams
Lux Pay will never request:
- passwords
- OTP codes
- private keys
- seed phrases
Users should be cautious of:
- suspicious emails
- fraudulent messages
- fake websites
7. Security of Crypto Assets
For crypto-asset services, Lux Pay adopts security measures which may include:
- secure custody systems
- cold storage solutions
- multi-level access controls
8. Security Incidents
In the event of security incidents, the Company may implement measures including:
- temporary suspension of services
- blocking transactions
- notifications to affected customers
Relevant incidents may be reported to competent authorities where required by law.
9. User Responsibilities
Users are responsible for:
- protecting their credentials
- using secure devices
- keeping software and security systems updated
The Company is not responsible for losses resulting from user negligence.
10. Updates to the Security Policy
Lux Pay Digital Services S.r.l. may update this security policy in order to:
- improve system protection
- comply with new regulatory requirements
- address emerging cybersecurity threats
Updates will be published on the website or platform.
11. Contact
For security-related reports:
Lux Pay Digital Services S.r.l.
Via della Posta 7
20123 Milan – Italy
Email:
support@lux-pay.co
