Skip to main content

Regarding MPChat's security

How MPChat protects IDs, chats, funds and card data — short points plus a link to the full who-holds-what overview.

📌 Full guide updated

Who holds your ID data, chats, Pay funds, Web3 keys, and card secrets? Read the new overview: MPChat Security & Privacy Overview.


📖 Key points

  • ID & face data: collected and processed by identity provider Sumsub. MPChat does not receive or store raw ID images or biometric templates — only verification outcomes and structured fields.

  • Chat content: private conversations use end-to-end encryption (E2EE). Decryption keys stay on your and your contacts’ devices; MPChat servers cannot decrypt private chats.

  • MPChat Pay funds: balances are ledgered by MP PAYMENT INC; underlying on-chain USDT sits in licensed partner Cobo and HashKey custody solutions (Cobo is ISO 27001 certified). Staff cannot unilaterally move funds; freezes or holds may apply under the agreement.

  • MPChat Web3: self-custody with keys generated and signed inside Turnkey TEE; no seed-phrase display and export is not available today.

  • Card secrets: card number / expiry / CVV are not persisted; viewing them in the App loads live data from the card issuer API.

  • Withdrawal controls: suspicious or high-risk withdrawals go through multiple layers of internal and external review.

For partner introductions, disclosed licenses, and anti-scam reminders, see the Security & Privacy Overview.

Did this answer your question?