Two-step device verification · Encrypted session
3-strike lockout · End-to-end encrypted · Direct store payments (no aggregator cut)