RBC Pay
Start Transaction
Select Location
Home / Security

SECURITY AND ACCOUNT PROTECTION

Security built around
the transaction itself

Protection does not come from one control. It comes from verified participants, agreed terms recorded before payment, documented delivery, an inspection period, and funds that move only when the conditions are met.
Protect your account
Report a security issue

Verified participants

Encrypted connections

Documented records

Controlled funds release

Where the protection actually comes from

Six layers, each doing a job the others cannot.

Identity verification

Both sides of a transaction go through verification before funds can move, which makes it far harder for anyone to operate anonymously.

Terms recorded before payment

Price, delivery, inspection length and release conditions are written down and accepted by both parties before the transaction is funded.

Funds held, not forwarded

Money in a transaction is held for that transaction rather than passed straight to the other party, and is released only when the agreed conditions are met.

Documented delivery

Approved carriers provide tracking and confirmed delivery that both parties can verify independently, so the inspection period starts from a documented arrival.

Inspection before approval

The buyer has an agreed window to check what arrived before anything is released. Shipping alone does not release funds.

Transaction monitoring

Activity is monitored for patterns associated with fraud and money laundering, and a transaction can be held while a concern is reviewed.

What we do on our side

Encrypted connections

Information sent between your device and Rbcpay travels over an encrypted connection.

Access controls

Access to systems and information is restricted to what is necessary for the work being done.

Audit records

Terms, messages, documents, status changes and activity history are preserved on the transaction record.

Regular review

Our operations are subject to regular audits and examinations that serve to protect funds and determine the soundness of our processes.

Security is a process rather than a badge. No platform can eliminate every risk, which is why the controls above sit alongside what each participant does on their own side.

Protecting your own account

Most account compromises begin outside our systems, with a reused password or a convincing message.

Account security

  • Use a long, unique password that you use nowhere else
  • Turn on every additional security option available in your account
  • Protect the email account you use for Rbcpay and its recovery options
  • Sign out of shared or public devices
  • Review active sessions and login alerts
  • Change your password if you suspect it has been exposed

Communication security

  • Access your account by typing the address yourself, not from a link
  • Confirm official domain names and email addresses
  • Do not trust caller ID alone, verify independently
  • Never open attachments from senders you do not know
  • Verify any change of details through a known, trusted channel
  • Keep suspicious messages rather than deleting them

What Rbcpay will never ask you for

  • Your password
  • A verification or one-time code
  • Payment sent to an account outside your Rbcpay transaction
  • Remote access to your computer or phone
  • Payment in gift cards, cryptocurrency or an untraceable transfer
  • Approval of a transaction you have not inspected
If you receive a request like this, do not respond. Report it to us before you act on anything in the message.

Security at every stage of a transaction

1

Terms agreed

Both parties accept the same written terms before anything is funded.

2

Funds secured

The buyer pays Rbcpay, not the seller. The seller is told the funds are confirmed.

3

Delivery documented

An approved carrier provides tracking and confirmed delivery.

4

Inspection window

The buyer checks what arrived against what was agreed.

5

Release on approval

Only the buyer's approval releases the funds, and the payment is then final.

If you think something is wrong

1. Stop

Do not send money, ship goods, approve a transaction or share a code while you are unsure.

2. Verify

Log into your account by typing the address yourself and check whether the same information appears there.

3. Report

Tell us what happened, with your transaction reference and anything you were sent. Do not reply to the sender first.
⚠  If money has already moved or your credentials may be exposed, contact your bank or payment provider and local law enforcement immediately. Do not wait for a platform review.

Reporting a security issue

If you believe you have found a vulnerability in our website or services, please report it privately so it can be investigated and fixed before it is disclosed anywhere else.
  • Tell us what you found and how to reproduce it
  • Include the exact address of the page or endpoint
  • Do not test against live transactions
  • Do not test against accounts that are not yours
  • Give us reasonable time before disclosing publicly

Where to send it

escrow@rbcpay.com

+1-519-993-2775

Rbcpay.com, Inc.
1 King Street West, 48th Floor, Suite 4809-01
Toronto, Ontario M5H 1A1, Canada
Report a bug
Fraud prevention

Security questions

Do not act on the message itself. Log into your account by typing the address yourself and check whether the same information appears there. If it does not, the message did not come from us.
Do not pay and do not ship. Payments made outside a Rbcpay transaction carry none of the protection described on this site. Report it with your transaction reference before you act on anything.
Then the funds are not confirmed. Only the confirmation shown in your own Rbcpay account is reliable. A message, an email or a screenshot from the other party is not.
Yes. A transaction can be held while a concern is investigated, as set out in the Terms and Conditions.
The agreed terms, the participants, price and currency, inspection and release conditions, carrier and tracking evidence, messages, uploaded documents and the activity history. That record is what we refer to if anything is disputed.
Information travels over encrypted connections, access is restricted on a need-to-know basis, and how we collect, use, retain and share information is set out in full in the Privacy Policy.

Not sure about something? Ask before you act.

Our team would rather answer a question than investigate a loss.
Contact support
Read fraud prevention
Security information on this page is general guidance. Available safeguards and response options vary by transaction status, jurisdiction and applicable terms.