Security
How we secure your account
How Orjar handles Plan data, Live money, and identity — clearly, without hype.
Plan is a sandbox
Figures you enter in Plan do not move through banking rails. No KYC is required to budget. You can decide where your money goes and stay in control before any live wallet exists.
Live money sits with a licensed bank
Orjar does not hold deposits. Live Mode wallets and virtual NUBANs are provided through Anchor Microfinance Bank, licensed by the Central Bank of Nigeria (CBN). Eligible deposits may be covered by the Nigeria Deposit Insurance Corporation (NDIC) subject to applicable limits and rules. Transfers use Nigerian payment rails (e.g. NIP) as disclosed in-product before you confirm.
KYC when you go Live
Identity verification is required to activate Live Mode — BVN and personal details for Tier 1; higher tiers may need government ID and proof of address. Tier 1 BVN checks are often quick; document review can take longer if manual.
How we handle your BVN
Your BVN is verified through licensed partners. Anchor Microfinance Bank holds it for your deposit account. On your Orjar KYC profile, BVN is stored encrypted — not as a plaintext profile field. We do not store raw biometric templates or liveness images; those checks run with Dojah. We never display your full BVN in the app after submission.
Two-factor authentication
Enable MFA under Settings → Security → Two-Factor Authentication. We strongly recommend turning it on before using Live Mode.
Transaction PIN
A six-digit transaction PIN is required for sensitive wallet actions such as transfers. Set it under Settings → Security → Transaction PIN.
If you suspect fraud
Change your password immediately, enable MFA, and email hello@orjar.app with details. For unauthorised Live Mode transactions, contact us urgently so we can assist with freezing your account.
How we protect your data
We use encryption in transit and at rest, access controls, audit logging, and NDPA / NDPR-compliant processing practices. You control AI access to financial context where settings exist. See our Privacy Policy and Data Policy for full detail.