LWORXPAY is built to protect your money, your identity and your business. LworxPay Limited is registered with the Uganda Registration Services Bureau (URSB) and licensed by the Bank of Uganda (BOU). This page explains, in plain language, how we keep your account safe and what you can do to stay safe too.
1. Registered and licensed
Registered with URSB. Licensed by the Bank of Uganda (BOU).
LworxPay Limited is a legally registered Ugandan company and LWORXPAY operates under a Bank of Uganda licence. We follow Ugandan law, including rules on customer verification, fraud prevention and anti-money-laundering. You can read about the people behind the company, including our founder and owner BAMBALIRA SILVER KEITH (ShacksTech) and our secretary SALI NAJIBU (Professor Najjibu FX), on the About page.
2. How we protect your account
Authenticator codes: a code from your authenticator app is required before you withdraw or send money.
Email verification: new accounts and password resets are confirmed with one-time codes sent to your email.
Strong password storage: passwords are stored using one-way hashing. Nobody at LWORXPAY can read your password.
Secure connection: the website and API are served over HTTPS.
Bot protection: we use reCAPTCHA on sensitive forms to block automated attacks.
3. Identity checks (KYC)
Every account is verified with a valid ID before withdrawals are enabled. This protects honest customers, makes it harder for criminals to misuse the platform, and keeps us compliant with the law. Your ID documents are stored privately and are only visible to authorised LWORXPAY administrators.
As an extra safety step, new accounts wait 24 hours before their first withdrawal. We may also hold a withdrawal for a short security review if something looks unusual.
4. Developer and API security
API keys can be locked to your server IP addresses (IP whitelist).
Signed webhooks: every callback is signed with HMAC-SHA256 using your secret, so you can confirm it really came from LWORXPAY.
Status checks: you can always confirm a payment by transaction reference before delivering goods.
5. Fraud monitoring
We monitor the platform for abuse. Accounts that show abusive traffic or suspicious behaviour can be suspended automatically, and attackers’ IP addresses can be blocked. When we act on an account, we do it to protect your money and the other customers on the platform.
6. Transparency
Your full transaction history is available in your dashboard.
You receive in-app and email notifications for transactions, password changes and profile updates.
Fees are shown on the Pricing page and before you pay. Collections are free of LWORXPAY fees.
7. How you can stay safe
Never share your mobile money PIN, authenticator code, password or API key with anyone. LWORXPAY staff will never ask for them.
Always check that the address in your browser is lworx-pay.com before you log in.
Turn on the authenticator and use a strong, unique password.
Double-check the phone number before you withdraw or send money. Money sent to a wrong number cannot always be recovered.
Keep your API keys on your server only, never inside a public app or website.
8. Report a problem
If you see a suspicious transaction, a fake website pretending to be LWORXPAY, or you think your account is at risk, contact us immediately using the details below. Please include your Merchant ID and the transaction reference so we can help faster.
LWORXPAY