For your customers, for your business and for your money. Here's exactly what Lefan does, in plain words.
Your customers type their card on a secure page, never on your website. Your site never sees or stores a card number, so there's nothing on it to steal.
The card number fields are "Tokenized". Not even Lefan's own servers knows the customer's card details.
The payment page only runs code from Lefan and our security tools. Nothing else can run, reducing the risk of exploitation.
Card payments are paid into your own business bank account by your bank. Lefan never holds your money, so it can never be stuck with us.
Fraud screening checks payments as they come in. If one looks risky, it is held: the card is approved but not charged.
You decide. Accept, and the money is collected. Reject, and it's released back to the customer.
If you haven't decided, you're reminded after 2 days and again after 6.
A quiet check on the payment page stops bots. Most customers never notice it; anyone suspicious is asked to confirm.
Each payment link allows only a few attempts, and expires if it is not used.
Too many tries from one place in a short time are blocked.
A burst of declined cards at your store raises an alarm. Our team is alerted and blocks where it's coming from.
If your bank is slow to answer, Lefan doesn't guess. It tells your customer not to pay again, and keeps checking with the bank until it knows whether the payment went through.
While it checks, the order cannot be paid a second time.
Every payment request is signed, and its contents are encrypted on the way to the bank and back.
The card payment network is making this stronger encryption required in 2027. Lefan is already set up for it.
Our team is alerted the moment any part of Lefan stops working, day or night.
Your connection to the bank has to be renewed every few years. You get reminders 60, 30 and 7 days before, and we help you renew it, so payments never stop by surprise.
Keep your website, WordPress and plugins up to date, and use a strong password with two-factor sign-in for your website admin.
Check held orders promptly, and accept only payments you are comfortable with.
Tell us straight away if anything looks wrong. We're on WhatsApp.
We're happy to go through it with you, or with whoever looks after your website.