How Wyra Keeps Your Payments Safe: Our Security Explained

When you enter your credit card to send a recarga, you're trusting us with your financial data. We take that responsibility seriously. Here's exactly how Wyra protects your information — no vague promises, just the technical details you deserve to know.

Our security at a glance

How a payment flows through Wyra

Understanding how your payment travels helps you understand where your data goes — and where it doesn't:

1. You choose a recarga — amount, country, carrier, phone number. This happens in the Wyra app.
2. Wyra creates a checkout session — Our server tells Stripe the amount and fee. No card data is involved yet.
3. You pay on Stripe's page — You're redirected to Stripe Checkout, a secure page hosted entirely by Stripe. Your card data goes directly to Stripe and never passes through Wyra.
4. Stripe confirms payment — Stripe sends us a secure webhook notification that the payment was successful. This notification is cryptographically signed so it can't be faked.
5. Wyra executes the top-up — We send the airtime through Reloadly, our licensed top-up provider. The recarga arrives on the recipient's phone within seconds.
6. You get confirmation — Both email and in-app notification confirm the successful transaction.

At no point in this process does Wyra have access to your card number, CVV, or billing address. Stripe handles all of that.

Webhook security

When Stripe notifies us about a successful payment, we verify the notification using HMAC-SHA256 cryptographic signatures. This means:

• We verify that the notification actually came from Stripe (not an attacker)
• We check that the data hasn't been tampered with in transit
• We enforce a 5-minute replay window to prevent repeated processing
• We have idempotency protection so the same payment can never be processed twice

Transaction limits

As an additional layer of protection, Wyra enforces transaction limits that help prevent unauthorized use of your account:

• Per transaction: $100 maximum (Tier 1) / $300 maximum (Tier 2 with verification)
• Daily: $200 maximum (Tier 1) / $500 maximum (Tier 2)
• Monthly: $1,000 maximum (Tier 1) / $2,500 maximum (Tier 2)

These limits are not just for compliance — they protect you. If someone gained unauthorized access to your account, they'd be limited in how much damage they could do.

Legal and compliance

Wyra Technologies LLC operates under Florida state law and federal regulations. We maintain published legal documents that you can read at any time:

• Terms of Service — How Wyra works and your rights as a user
• Privacy Policy — What data we collect and how we use it
• AML/KYC Policy — Our anti-money-laundering and identity verification standards

All three documents are available in English and Spanish, because we believe legal transparency should be accessible in your language.

What to do if something seems wrong

If you notice an unauthorized transaction, a charge you don't recognize, or any suspicious activity on your Wyra account, contact us immediately at hola@wyraapp.com. We take every report seriously and will work with you and Stripe to resolve it.