Everything on this page is what we plan to build and test, in the future tense on purpose. Nothing is live, and no real card or MoMo number should ever be typed anywhere on this site.
The small keyhole will sit in the modal, each secure field and every native sheet. It says what's happening to what you typed. It can be copied as a picture, so it's never the only proof.
Empty. Nothing has been typed.
Checking what you typed.
Sealed. The merchant can't read it, and neither can this page.
This number can't go any further. It wasn't kept.
We can't reach the field. Don't type anything.
Anyone can copy a picture of a lock. Nobody else can show your word, or put our address in your browser's bar.
We'll never ask for your PIN here. Your phone asks for it, and shows this same name and amount.
Ours will open only on AgooPay's own address, and it stays in view. A copy has a lookalike.
After your first payment on a device, the lock will show a word you chose. A copy's page can't read it, because only our address can.
Your PIN goes to your phone and your bank, never to a page. Anything asking for it here isn't us.
The name and amount on the screen will match what your phone asks you to say yes to. If they differ, say no.
AgooPay will build its own vault, not rent one. It will be built and tested fully on test numbers, and it won't see a real card until it has been independently assessed.
From the sealed field to the vault, and nowhere else. Your page won't see it, our other systems won't see it, and the merchant gets a token.
The vault will run apart from everything else, with its own network, its own releases and its own access. Nothing else will read a card number.
A key hierarchy rooted in dedicated security hardware, with audited libraries and no hand-rolled cryptography. Rotation without downtime, and two people for anything that matters.
Random tokens, each one usable by one merchant only. A token from one merchant will fail for another. Security codes and PINs are never kept after authorisation.
Every use will be logged, with no card data in any log. There will be no human route to a clear card number, and alerts on anything unusual.
An independent assessor, regular scans and penetration tests will come before the first real card. Until that assessment exists, we won't claim it.
A merchant will be able to move its tokens to another provider through a controlled, recorded route. Our vault won't be a trap.
They aren't us. Nobody can use AgooPay to make or receive a payment.
There's no AgooPay checkout, link, code or app you can use today. Any that you see isn't ours.
Don't give a card number, a MoMo number or a PIN to anything using our name.
Write to hello@agoohq.com with where you saw it. A person will read it.
Tell us who you are and what you'd like to know. This signs you up to nothing.