Two-step verification is a way to use Payoneer more securely. When you perform certain account-related actions, we’ll send a code to your mobile phone that you enter to verify it’s you performing the action. This extra layer of security reduces the risk of unauthorized access to your account or unauthorized transactions being performed in your account.

You can turn on two-step verification from our web app or from our mobile app.

From the web app (Payoneer account you view in a browser)

If you are offered the two-step verification service during sign-in, follow these steps to turn it on:

1. Review the mobile number to which we'll send you verification codes. By default, we'll display the mobile number saved in your Payoneer account profile.
• If you'd like to receive verification codes to a different mobile number, enter the new number (by editing the number displayed).
• If the number saved in your Payoneer account profile is a landline, you will need to enter a mobile number to use with two-step verification.
2. Click Turn on. We'll send a verification code to your mobile number.
3. Enter the verification code and click Verify.
• If you don't enter the verification code within a short period of receiving it, the code will expire and you'll need to start again.
• If you didn't get the code, you can click Resend. Resend only works a certain number of times. If you are not receiving verification codes, you can use the Not now option to skip turning on two-step verification, and then try again later. If the problem persists, contact us.

Note: If you live in a country where two-step verification is required due to PSD2 or other local regulations, you will not be able to skip turning on two-step verification. In such case, if you are unable to receive verification codes, contact us.

• If you enter an invalid or incorrect code too many times, access to your account will be blocked. This is a security measure used to prevent account takeover. If access to your account is blocked, contact us.
4. Once two-step verification is turned on, make sure to copy and save the recovery code we provide you to a safe place. You may need to use this recovery code at a later time.

If you skip turning on two-step verification during sign-in, you can enable it by going to Settings > Security Settings > Two-step verification in your Payoneer account, clicking Turn on under Two-step verification, and then following these steps:

1. Enter the phone number to which you would like to receive verification codes.
2. Enter the verification code that’s sent to you.
3. Write down your recovery code in a safe place.

From the mobile app

1. Sign in to the mobile app and navigate to Security settings.
2. Tap Two-step verification and follow the on-screen instructions.

If prompted, you can choose to use the mobile app to approve actions. When you choose this option, we’ll send you push notifications instead of verification codes to verify secured actions in your account. For more details on using the mobile app to approve actions, see Two-step verification using our mobile app below.

Don’t worry! We use extensive security mechanisms, based on sophisticated risk analysis, to determine when to request two-step verification. Read more about securing your Payoneer account.

If you see the Not now option when you are prompted to turn on two-step verification, you can skip turning it on, but we will offer you the service periodically. We recommend turning on two-step verification to increase the security of your Payoneer account.

Note: If your country of residence or Payoneer account terms are governed by specific regulations requiring two-step verification, you will not be able to skip turning on two-step verification.

If you have two-step verification enabled and would like to disable it, you can do so by clicking Security settings under the Settings tab and clicking Turn off under Two-step verification, then verifying the code that was sent to your phone.

Note: If you don’t have access to the phone to which we send you verification codes, you’ll first need to use your recovery code to change the phone number used for verification codes.

Note: At this time, you cannot turn off two-step verification from the mobile app. We are working to add this functionality soon.

The mobile number saved in your Payoneer account profile does not have to be the same number you use for two-step verification.

The first time you turn on two-step verification, we display the mobile number saved in your account profile. If you do not specify a different number at that time, we'll send verification codes to that mobile number.

Once two-step verification is turned on, you will be able to use your recovery code instead of a verification code when you want to edit your two-step verification settings.

If you lose your recovery code, contact us.

If you no longer have access to the existing phone number associated with your two-step verification settings, please contact us and we will be happy to assist you in resetting it.

If you still have access to the phone number listed and want to change it, please follow the steps below:

1. Sign in to Payoneer.
2. Go to Settings > Security settings.
3. Scroll down to Two-step verification and click Edit.
4. Enter the mobile number you wish to receive verification codes to and click Save. This can be a different mobile number from the one saved in your Payoneer account profile.

Note: If you are using our mobile app to approve secured actions but want to change the phone number for receiving codes, click Change beside the mobile number displayed and enter the mobile number for receiving codes.

5. Enter the verification code sent to your phone.

If you do not have access to your phone, you can use your recovery code for verification

6. We’ll confirm that two-step verification is turned on.
7. Copy and save the recovery code displayed on the screen to a safe place.

Note: Changing the mobile number to which you receive verification codes does not change the mobile number saved in your Payoneer account profile. Similarly, once two-step verification is turned on, changing to the mobile number in your Payoneer account profile does not change the mobile number to which you will receive verification codes.

Read how to update your contact details.

This sometimes occurs if there are network-related problems. Verify that your device is connected to a cellular network or try again later.

You can also try the Call me option and we’ll call your mobile device with your verification code.

If the problem persists, contact us.

Note: If you are unable to receive cellular service to get verification codes, try switching to verification using our mobile app, which works when connected to a data network or WiFi connection.

To ensure the safety and security of your account, if an incorrect verification code is entered too many times, we block access to the account. Please contact us if you receive a message telling you your account is blocked.

Two-step verification using our mobile app is an easy, fast, and even more secure way to verify secured actions in your Payoneer account.

Because it works anywhere you are on a data or WiFi network, no cellular network is needed, so it’s great for when you are traveling (often text messages are not available when in other countries).

Two-step verification using our mobile app is simple to set up and even easier to use. Once you turn it on, whenever a secured action is performed in your Payoneer account (web app) we’ll send a push notification to the registered mobile phone. Tap the notification to open the mobile app, sign in, and tap to approve. That’s it!

When you use the mobile app to verify secured actions, it requires you to have your mobile device in hand, introducing a second factor of authentication. While receiving codes via text message (SMS) also requires you to have your mobile device, in the rare event of an attempt at account takeover, trained hackers can intercept SMS messages sent to a mobile number without having the associated device in hand. This is not possible with push notifications as the actual physical device is needed for the second layer of verification.

If you are not yet using two-step verification in your Payoneer account:

1. Sign in to the mobile app and navigate to Security settings.
2. Tap Two-step verification and follow the on-screen instructions.
3. When prompted, choose to use the mobile app to approve actions.

If you are already using two-step verification in your Payoneer account:

1. Sign in to the mobile app and navigate to Security settings.
2. Tap Two-step verification to see the two-step verification settings.
3. Toggle on the Use mobile app to approve actions setting.

Note: After turning on two-step verification using the mobile app on a specific mobile device, that device is registered as the official device for two-step verification using the mobile app. In cases where we are required to send you a verification code via text message (SMS), we’ll send the code to the phone number you specified when you turned on two-step verification, even if that number is associated with a different device from the one registered for verification using the mobile app. You can always change the number where we send you codes from our web app but doing so will not change the device where we send push notifications. If you want to receive push notifications to a different device, follow the instructions here.

We recommend keeping two-step verification using the mobile app turned on as it is even more secure than receiving codes via text message (SMS). If for some reason you wish to revert to receiving codes (for example, you will not have data or WiFi service for some period of time), follow these steps:

1. Sign in to the mobile app and navigate to Security settings.
2. Tap Two-step verification to see the two-step verification settings.
3. Toggle on the Use mobile app to approve actions setting.

Note: At this time, you cannot completely turn off two-step verification from the mobile app.

It depends.

If you perform a secured action from our mobile app on the device where you normally receive your push notifications for verification, you won’t need to verify the action. If you perform a secured action from our mobile app on a different device, we will send a push notification to the device where you normally receive them, and you’ll need to approve the action as usual.

No! You can turn on two-step verification via the mobile app from any mobile phone that has the Payoneer mobile app installed and working. We recommend that you set it up on the mobile phone of the owner or authorized representative of the Payoneer account, specifically the person authorized to approve sign-ins and financial transactions.

If you set up the Payoneer mobile app on a different mobile phone, whether or not you change your phone number, follow these steps to receive push notifications on the new mobile device instead of the old one:

1. Sign in to the mobile app on the new device. We’ll send a push notification to the old device to approve the sign-in.
• If you still have old device, approve the sign-in.
• If you don’t have access to the old device, tap I didn’t get the notification and choose the option to approve the action using a verification code instead. (The verification code is sent to the number listed in your two-step verification security settings in our web app.)
2. Navigate to Security settings and tap Two-step verification to see the two-step verification settings.
3. Under the Use mobile app to approve actions setting, tap Switch to this device.
4. Confirm that you want to switch and enter the verification code we send you. (The verification code is sent to the number listed in your two-step verification security settings in our web app.)

Use these troubleshooting tips if you are not receiving push notifications as expected:

• Make sure your mobile device is connected to a data or WiFi network.
• Make sure that notification settings for the app are not turned off at the device settings level.

Trusted beneficiaries are contacts or bank accounts that you mark as trusted, meaning any payments or withdrawals to those beneficiaries will not be subject to the two-step verification flow.

Here’s how it works:

Normally, when you have two-step verification turned on for your Payoneer account, we’ll verify it’s you making a payment or withdrawal by sending a verification code to your mobile device. There may be cases where you wish to skip this verification step, for example, if you make frequent withdrawals to your personal bank account or make regular payments to the same recipient.

For such cases, you can add the relevant bank account or payment recipient to your trusted beneficiaries list. Once a contact or bank account is on this list, when you make a payment or withdrawal to that beneficiary, Payoneer will not perform two-step verification during the transaction.

You can add:

1. Personal or company bank accounts listed in your Payoneer account to which you can make withdrawals from your Payoneer balance
2. Contacts who are also Payoneer customers to whom you pay directly to their Payoneer account
3. Approved recipient bank accounts listed in your Payoneer account to which you send payments

When two-step verification is turned on for your Payoneer account, you’ll be asked to enter a one-time verification code when making a withdrawal or payment. On the screen where you enter the code, you’ll see one of the following options:

When withdrawing funds - Don’t ask for a code when withdrawing to your bank account

When making a payment to another Payoneer customer’s Payoneer account - Don’t ask for a code when paying [recipient’s name]

When making a payment to a recipient’s bank account - Don’t ask for a code when paying to [recipient’s bank account]

Simply check the box beside this option, and the account/contact will be added to your trusted beneficiaries list. You can later remove trusted beneficiaries you’ve added from Security settings > Trusted beneficiaries for two-step verification in your Payoneer account.

Note: If two-step verification is not turned on for your Payoneer account, you’ll need to turn it on to add trusted beneficiaries or view previously added trusted beneficiaries.

To view or remove a trusted beneficiary from the list, go to Security settings > Trusted beneficiaries for two-step verification and click View/Remove.

To remove a trusted beneficiary, click Remove from list and then Save at the bottom.