Security

We treat gift-voucher checkout as high-risk digital goods: velocity limits, merchant KYB, hashed codes, and PSP-hosted card collection.

Cards

Raw card numbers are not stored on VoucherOnline servers. Checkout uses the payment partner’s fields or hosted page, with 3-D Secure where available.

Codes

Voucher codes are stored as hashes. Only a short suffix is shown in admin tools.

Closed loop

Redemption APIs reject any merchant that did not issue the code. There is no cash-out or cross-merchant spend.