Every payment you make is more than just a transaction. It’s an act of trust. Whether you’re paying bills, sending money to loved ones, shopping online, or receiving payments for your business, you deserve the confidence that your money and personal information are protected every step of the way.
At eSewa, security isn’t just a feature. It’s the foundation of everything we build. Trusted by over 10 million Nepali, we continuously invest in advanced cybersecurity, global security standards, and intelligent fraud prevention to help keep your account and every transaction secure.
Here’s how we protect you every day.
Security Built on Global Standards
Protecting financial information requires globally recognized security practices and continuous improvement.
ISO 27001:2022 Certified
eSewa is an ISO 27001:2022 certified organization, demonstrating our commitment to maintaining a robust Information Security Management System (ISMS). This internationally recognized certification ensures we continuously identify, manage, and improve information security risks across our systems and operations.
PCI DSS Compliant
eSewa follows the Payment Card Industry Data Security Standard (PCI DSS), one of the world’s leading security standards for protecting payment information. This helps ensure sensitive payment data is handled using globally accepted security controls.
How We Protect Your Account
Secure from the Start
From the moment you log in to the moment your payment is completed, multiple layers of security work together to protect your account.
Depending on your device and the action you’re performing, authentication may include:
- Fingerprint authentication
- Face ID authentication
- MPIN verification
- Password authentication
- One-Time Password (OTP) verification
These safeguards help ensure that only you can access your account and authorize transactions.
Device Binding Protection
Your eSewa account is securely linked to your registered mobile device through our device binding technology. Even if someone knows your login credentials, they can’t simply access your account from another device without additional verification.
Stronger Login Security
Our authentication systems continuously evaluate login attempts using advanced risk detection tools. This helps provide a smooth login experience while protecting your account from unauthorized access.
For added security, your login session automatically expires after 24 hours of inactivity. This means you'll need to sign in again before accessing your account, helping prevent unauthorized access if your device is left unattended.
Every Payment Is Protected
Payment Encryption
Every payment made through eSewa is encrypted to help keep your financial information secure.
Sensitive customer and transaction data is protected using AES GCM encryption, while TLS 1.2 secures communication between your device and our systems, helping keep your information private throughout every transaction.
Payment Privacy
Your financial activity belongs to you.
Payment details are visible only to the parties involved in the transaction, helping protect your privacy while giving you confidence every time you pay.
Smarter Fraud Prevention
Cyber threats continue to evolve, and so do our defenses.
Real-Time Risk Monitoring
Every transaction is continuously monitored to detect unusual or suspicious activity. If abnormal behavior is identified, our systems can take immediate action to help prevent fraud before it happens.
Our security teams also investigate fraud reports and proactively block fraudulent users from accessing the eSewa platform.
Intelligent Fraud Detection
We use advanced technologies to identify unusual transaction patterns, abnormal account activity, and emerging fraud techniques. These systems continuously learn and adapt, helping detect threats faster while minimizing disruption for genuine users.
24/7 Security Monitoring
Our dedicated Security Operations Center (SOC) monitors our infrastructure and payment systems around the clock, allowing our teams to quickly detect and respond to potential security threats.
Working Together for a Safer Digital Nepal
Keeping digital payments safe is a shared responsibility.
eSewa works closely with the Cyber Bureau of Nepal Police to support fraud investigations, combat cybercrime, and strengthen Nepal’s digital payment ecosystem. We also encourage users to report suspicious activity immediately so appropriate action can be taken as quickly as possible.
How You Can Stay Safe
You can further strengthen your account security by following a few simple practices:
- Never share your OTP, MPIN, or password with anyone.
- Enable fingerprint or Face ID authentication whenever available.
- Verify recipient details before sending money.
- Keep your mobile device updated.
- Report suspicious calls, messages, or transactions to eSewa Customer Support immediately.
Trust Built Every Day
Trust isn’t built with promises. It’s earned through every secure transaction.
That’s why we continuously invest in advanced cybersecurity, intelligent fraud prevention, and internationally recognized security standards to protect your money and personal information.
As digital threats evolve, so do we. Because every payment you make deserves the highest level of protection.
Your trust is our greatest responsibility, and protecting it is our commitment every day.
