Security that gets out of your way
Strong protection should not mean answering four questions every time you check a balance. Here is exactly what we do, what we will never do, and what to do if something looks wrong.
Think you have been targeted right now?
Freeze your cards in the app, then call us. The fraud line is open 24 hours a day and answers in under ninety seconds.
What protects your account
Passkeys, not passwords
A cryptographic key on your device, unlocked by face or fingerprint. There is nothing to phish and nothing to reuse elsewhere.
Device binding
A new device must be approved from one you already trust. Stolen credentials on their own are not enough to get in.
Behavioural monitoring
Payments that do not look like you are held for a two-second confirmation, rather than interrupting every routine transaction.
Zero-liability guarantee
If someone else spends your money, you get it back — with provisional credit typically applied within one business day.
Payee verification
We check the name you type against the name on the receiving account and warn you before the payment leaves.
Independently audited
ISO 27001 certified, SOC 2 Type II reported annually, PCI DSS Level 1 for card processing.
Rielora Capital will never
- Ask for your passcode, PIN or a one-time code
- Ask you to move money to a "safe account"
- Ask you to install remote-access software
- Send a link that asks you to log in to fix a problem
- Pressure you to act immediately or keep it confidential
What you can do
- Set up a passkey — it takes about thirty seconds
- Turn on transaction alerts for every card payment
- Use virtual card numbers for subscriptions
- Hang up and call back on a number you looked up yourself
- Tell us early — reporting fast makes recovery far more likely
The four scams we see most
Almost every case we investigate is one of these four, wearing a different costume.
Report something suspiciousSomeone claiming to be from your bank, the police or a government agency says your account is compromised and you must move your money somewhere "safe" immediately. No genuine institution will ever ask this. The urgency is the tell — end the call and dial us yourself.
A supplier emails to say their bank details have changed. The email address is one character different from the real one. This is the most expensive scam we see for businesses. Always verify a change of bank details by phone, on a number you already had.
A caller asks you to read back a code we just texted you, often framed as "confirming your identity". That code is what authorises a payment or a new device. We will never ask you to read one out. Nobody legitimate ever will.
A text about a missed parcel or a small unpaid fee, with a link to a convincing payment page that harvests your card details. Never follow a link in an unexpected message — go to the company's site directly and check there.
Found a vulnerability?
We run a responsible disclosure programme. Report it to security@northcrest.bank and you will get a human reply within one business day — we do not send legal threats to researchers acting in good faith.