Your money, your details, protected.
How tazdan keeps every dinar accounted for, checks risky payments before they move, and keeps your details between you and the people you choose — in plain language.
tazdan is pre-launch and not yet licensed. Where something isn’t done yet, this page says so.
Every dinar, accounted for.
Every movement of money is written as entries that add up to zero — and you can download a full statement of your own any time.
A second lock, in your pocket.
Turn on an authenticator app and sensitive actions need a fresh 6-digit code from your phone. A recovery code gets you back in if you lose it.
Your devices, and only yours.
Every phone and computer signed in to your account is listed. Forget one, or sign out all the others in a tap — it takes effect on their very next request.
Locked in escrow before you pay.
When a trade opens, the seller’s crypto is locked in escrow. It’s released to the buyer only when the seller confirms the payment arrived. If something goes wrong, either side can open a dispute.
Balances hidden with one tap.
Privacy mode hides every balance on screen — handy in a queue or on a bus. Press and hold to peek. Market prices stay visible.
Get paid without your bank details.
Share an @handle or a QR code. Nobody needs your bank account number or your phone number to pay you.
Verified once, kept between us.
We check your ID because the law requires it and because it keeps fraudsters out. The people you pay and trade with never see your documents.
Screens from the current app build. Names and amounts are illustrative.
Trust is earned in the details.
Moving money in Libya often means trusting people you can’t see — a clerk, a stranger in a cash deal, an app. This is what we changed.
A number on a screen can be changed by someone you’ll never meet.
Nobody at tazdan can edit your balance. Every change is a balanced entry, and corrections need two people.
In a cash deal, you hand over money and hope the other side delivers.
On P2P, the seller’s crypto is locked in escrow before you pay.
To get paid, you give your bank account number and phone to people you barely know.
Share an @handle or a QR code instead.
One stolen password, and the account is empty by morning.
New devices and larger payments need a fresh code — or Face ID on a phone you already trust.
Every dinar, accounted for.
tazdan keeps its books the way banks and auditors do: double-entry. Money can’t appear or disappear without a matching entry somewhere else.
Watch a payment being recorded.
Pick a payment. Each line is an entry in tazdan’s books; together they must add up to zero, or nothing is saved.
| Entry | Amount |
|---|---|
| Payment sent | |
Your wallet Customer money | −100.00 LYD |
@omar’s wallet Customer money | +100.00 LYD |
| Total | 0.00 LYD |
A payment between two tazdan users moves from one customer account to another, instantly. It never leaves customer money.
Your wallets, P2P escrow and money waiting to be sent abroad. This is money tazdan owes its customers.
Money on its way with banks, payment partners and blockchains, plus controlled corrections.
Our fees and exchange margin. For transfers abroad, they count as ours only once the money is paid out — never when you fund it.
Amounts and names are illustrative; account names are simplified.
Checked by the database itself
Every group of entries is added up again at the moment it’s saved. If it doesn’t balance in every currency, nothing is written.
Nobody can type over your balance
Your balance changes only through balanced entries. Entries can’t be edited or deleted afterwards — a mistake is fixed with a new, visible entry.
Corrections need two people
Adjustments above a small limit, goodwill refunds and rate overrides need a second staff member’s approval. Whoever asks can’t approve.
Money set aside for what’s pending
While a withdrawal, claim link, P2P trade, savings lock or business payout is pending, its money is reserved, so it can’t be spent twice.
Each payment happens once
A double tap, a second device or a shaky connection can’t apply the same payment twice. The repeat is refused.
Trading stops if the books disagree
Every five minutes, tazdan re-adds its books in every currency. If anything is off, buying, selling and converting stop automatically until a person has investigated.
Every staff action leaves a trail
Approvals, freezes and limit changes are logged with who did it, from where, what changed and why — in records that can’t be edited.
Our books keep customer money separate from tazdan’s own. Holding that money in dedicated safeguarding bank accounts — and reconciling those accounts every day — will be arranged with the licensed banking partners we launch with. It isn’t in place yet.
tazdan is not a bank. Balances are not covered by a deposit-protection or insurance scheme.
Only you can move your money.
Strong sign-in, a fresh check before risky actions and screening behind the scenes — without slowing down the payments you make every day.
Sign-in that watches the door
Passwords are stored only as bcrypt hashes. Sign-in tokens last 15 minutes and renew quietly; if a stolen one is ever replayed, every session is signed out at once. Signing out other devices takes effect on their next request.
One more check before money moves
Larger payments and anything from a new device ask you to confirm again — on transfers, chat payments, claim links and money sent abroad. Your limits show before you confirm, so you never wait for a code you can’t use.
- 6-digit code by email
- Authenticator app
- Face ID on a trusted device
Outside wallets, added with care
Sending crypto out needs two-factor, a verified email and an address saved at least 24 hours earlier. If a send fails, the money comes back to your wallet.
Escrow on every P2P trade
The seller’s crypto is locked before you pay. Once you’ve marked a trade paid, it can’t simply be cancelled — a dispute goes to a person on our team.
Screening
Names and wallet addresses are checked against sanctions and politically exposed person watchlists before money goes to a bank, an outside wallet or another country. A possible match goes to a person — never an automatic no.
A 17-rule risk engine
Unusual amounts, sudden bursts, new devices and brand-new beneficiaries are weighed before every withdrawal, transfer abroad and business payout. If a rule ever fails to run, the payment waits for a person instead of going through.
- 1 geography
- 2 sanctions
- 7 money-laundering patterns
- 7 fraud patterns
Rate limits and kill switches
Sign-in, reset and code checks allow a handful of tries, then pause; addresses that keep failing are blocked. If something looks wrong, our team can pause one feature, currency, corridor, provider or account in seconds.
Encrypted custody
The master key behind tazdan’s crypto wallets is encrypted with AES-256-GCM. In production it is designed to be sealed by a cloud key-management service, so access to the database alone can’t unlock it.
Signed webhooks and hashed keys for businesses
Business notifications carry an HMAC-SHA256 signature with a timestamp, go only to HTTPS addresses and never to private networks. API keys are 192-bit random, stored only as hashes and shown once.
Your details stay yours.
Getting paid shouldn’t mean handing a stranger your bank account number, your phone number or your address. tazdan shows the people you deal with only what they need.
Pay and get paid with an @handle or a QR code. No bank account number or phone number to give out.
Send money by link to someone who isn’t on tazdan yet. Add a PIN, cancel any time before it’s claimed, and unclaimed money comes back to you when the link expires. The link itself carries no personal details.
In the P2P marketplace, other people see your first name and last initial with your real trade record — not your full name.
Hide every balance on screen with one tap; press and hold to peek. Your public profile stays off unless you switch it on.
Contact details are masked for staff whose role doesn’t need them. Where AI helps our team, emails, phone numbers and account numbers are masked first — and AI is off in production by default.
Exact locations, passwords, payment confirmation codes, session tokens and API keys are never stored as they are — only rounded or hashed versions.
Screens from the current app build. Names and amounts are illustrative.
What other people see
Only what they need to pay you or trade with you.
- Your @handle and name, when you pay or chat
- First name and last initial, in the P2P marketplace
- Your completed trades and completion rate
- A rough distance — only if you turned on Near me
What they never see
However you pay, these stay with you.
- Your bank account number
- Your phone number and email
- Your exact location
- Your balance
- Your ID documents
Near me, without your address.
Find P2P sellers close by without anyone learning where you are.
- You choose to share
Near me is off until you turn it on — for a listing, or for a single search. The app never asks for your location in the background.
- Rounded before it’s saved
A listing keeps only a point rounded to about a kilometre. Your exact spot is never stored.
- Only a rough distance is shown
Other people see a distance like “1 km” or “15 km” — never a pin, a map or coordinates.
We share personal data only as our Privacy Policy describes — for example with regulators when the law requires it, and with the verification and payment partners that process your transactions. Read the Privacy Policy
Private, not anonymous.
tazdan verifies every customer and screens payments, as the law requires — that’s what keeps stolen identities and fraud out. What we promise is that your details aren’t handed to the people you pay, the strangers you trade with, or staff without a reason to look.
What we haven’t done yet.
A security page that lists only strengths isn’t much use. This is the current state.
- External penetration testPlanned
- Scoped, not yet carried out. We’ll publish a summary when it’s done.
- Independent security auditsPlanned
- Formal third-party audits of our security controls are planned alongside licensing. Reports will be listed in the trust centre as they’re completed.
- Safeguarding accountsPlanned
- Customer money is separated in our books today. Dedicated safeguarding bank accounts and their daily reconciliation depend on the licensed banking partner.
- Cloud key management for custodyIn progress
- The master key is encrypted today; sealing it with a cloud key-management service is a launch requirement.
- LicensingIn progress
- Engaging with the Central Bank of Libya on licensing. tazdan is not licensed yet.
Found a problem? Tell us first.
Email us with enough detail to reproduce it — the page or endpoint, the steps and the impact. Please report privately and give us time to fix it before you publish.
Security, answered.
Money that’s accounted for.
Join the waitlist and be among the first in when tazdan opens in Libya.
Pre-launch. Services depend on regulatory approval and partner availability.