Your money is protected by escrow
When you pay for an order, the money is held by Michael Prime Services, not sent to the seller. The seller is paid only after you have received the item and had time to check it. If something is wrong, you open a case and the payment stays frozen until it is resolved. See Returns & refunds.
Proof of delivery with a 6-digit code
Each order has its own delivery code, shown only to the buyer. It is given to the seller or courier only when the item is in the buyer's hands. The code is never stored in readable form, is checked in a way that resists timing attacks, and locks after five wrong attempts, alerting our team.
Payments and cards
- Card details are entered only on the secure pages of licensed payment providers that comply with the PCI DSS card-security standard. Michael Prime Services never sees or stores your full card number or security code.
- A payment counts only after our server checks it directly with the provider (reference, amount and currency must all match), and it is applied exactly once. Messages from providers are accepted only with a valid cryptographic signature.
- Every day we compare our records with what each payment provider reports; any difference alerts our team at once.
- Every movement of money is recorded in a double-entry ledger that must balance, and is checked automatically every night.
Your account
- Every connection uses HTTPS with strict transport security.
- Passwords are stored only as Argon2id hashes, a modern algorithm designed to resist cracking.
- Wallet payments and withdrawals need your PIN; large withdrawals and new payout accounts also need a one-time code. New payout accounts can receive money only after 24 hours, and only in your own verified name.
- Sensitive details such as payout account numbers are encrypted in our database with authenticated encryption.
- You can see and sign out every device signed in to your account, and we tell you about new payout accounts and unusual activity.
- Sign-in, codes and other sensitive actions are rate-limited to stop guessing and automated abuse.
Fighting fraud and money laundering
- Money added to a wallet by card or transfer can be spent on Michael Prime Services or refunded to where it came from, but cannot be withdrawn to a bank. Only money earned from sales can be withdrawn.
- Top-up limits depend on how far an account is verified.
- Automated checks look for patterns linked to fraud and money laundering, such as accounts trading with themselves or money moving straight in and out. A person on our team reviews every case.
- Names are checked against an official government sanctions list. Where the law requires, suspicious activity is reported to the authorities.
- Listings and messages are scanned for common scams, such as requests to pay outside the app.
How our team works
- Staff sign in to a separate console with a password and an authenticator app. Viewing documents, full contact details or finance needs a fresh authenticator code.
- Each staff member sees only what their role needs, personal details are masked by default, the most sensitive actions need a second person to approve, and every staff action is written to a tamper-evident audit log.
- Disputes, reports, unusual withdrawals and compliance alerts reach the responsible team at once, and are escalated if they are not picked up in time.
Your privacy
We collect what we need to run the service and keep it safe, and we explain exactly what and why in our Privacy Policy. You can delete your account at any time.
Report a security problem
If you think you have found a security vulnerability, please email support@mpsev.com with the details. Please do not access other people's data or disrupt the service while testing. Machine-readable contact details are in security.txt.
Stay safe
- Always pay inside Michael Prime Services. Never pay a seller or employer outside the app.
- Never share your password, PIN or one-time codes. Our staff will never ask for them.
- Give your delivery code only when you are holding the item.
No system is completely secure. We keep improving these protections and update this page when they change.