Yes. Koobo does not handle your raw card details. Payments are processed by Xendit, a licensed payment provider that operates under Payment Card Industry Data Security Standards.
What that means for you
- Your full card number is never stored on Koobo's servers.
- If you save a card for next time, it is tokenised and held by the payment provider, not by us.
- Saving a card is always optional and always your choice.
Fraud checks
Transactions are monitored for unusual patterns. Occasionally we will contact you to verify something before confirming a booking, for example a high-value booking made from a new location or device. It is a brief inconvenience, and it exists so that a card used fraudulently does not result in a booking.
If a booking cannot be verified as legitimate, we may cancel it rather than let it proceed.
If you see a charge you do not recognise
Do two things, in this order:
- Contact your bank or card issuer. They can secure the account and, where appropriate, reverse an unauthorised charge.
- Email [email protected] so we can investigate on the platform side and stop any associated booking.
Where the protection stops
All of the above applies to payments made through Koobo's checkout. It does not apply to money sent directly to a host by bank transfer or e-wallet. Those payments cannot be traced or recovered by us, and no refund policy covers them.
If anyone asks you to pay outside Koobo, treat it as a warning sign and report it to [email protected].