Public summary and signed links
A successful lookup opens a signed link for that transaction’s summary and timeline. It can show the recorded amount, currency, bank names and events. Treat the link as an access link: someone who receives it may be able to open the same public view.
Do not post it on social media, public forums or screenshots. A signature protects the URL against modification; it is not the same as proving the holder is a transaction participant.
Private details need two checks
The private view requires a signed-in account with a verified email. That email must also match a sender or receiver email saved with the transaction. Registering with a different address or merely knowing the UETR does not satisfy that check.
If the saved participant email is absent, ask the transaction provider to review it. Email verification confirms control of an address; it does not certify a person’s bank account or the authenticity of the payment.
Controls in the application
The application hashes account passwords, encrypts stored private transaction details and alert email addresses, applies request limits to sensitive flows and uses signed email-action links. Authorized administrators can manage transaction records and status events.
These controls reduce specific risks. They are not a claim that the service has a particular certification or that every operational risk has been eliminated.
What you can do
- Use a unique password and keep your email account secure.
- Confirm an alert only if you initiated it.
- Keep signed links, account details and payment documents out of public discussions.
- Use your bank’s official channel for requests to release, recall or verify funds.
If something looks wrong
Stop accessing information that appears to belong to someone else. Email [email protected] with the affected page type and the minimum steps needed to explain the issue. Do not copy another user’s data into the report or continue testing against their record.
For a suspicious payment request, also contact your bank promptly. Website support cannot reverse a transfer.