Card numbers are never stored on our servers. When you reveal a card, the number and security code are rendered directly from the issuer's secure vault into your browser, so they do not pass through us at any point. Your account can be protected with two-factor authentication, and any card can be frozen instantly if something looks wrong. We will never message you first, and we will never ask you for a card number, a security code, a one-time code or a wallet key — anyone who does is not us.