Bank-grade security for every transaction
Rafiki is built on a foundation of regulatory compliance, technical security, and complete auditability.
Bank of Tanzania Licensed
We operate under a BoT licence and follow all Bureau de Change regulations.
AES-256 Encryption
All data is encrypted at rest and in transit using industry-standard ciphers.
Full Audit Trail
Every action — login, transaction, approval, adjustment — is logged with user, timestamp, and IP.
AML / CFT Compliance
Customer due diligence, screening, and suspicious activity reporting per BoT requirements.
Secure Infrastructure
Hosted on hardened infrastructure with daily backups and disaster recovery.
Role-Based Access
Every staff member sees only what they need. Maker-checker-authoriser controls everywhere.
Fraud Monitoring
Automated alerts on unusual activity. Manual review of every high-value transaction.
Regular Audits
Independent internal and external audits of financial and process controls.
Your security checklist
- Always log in from rafiki.co.tz — never share credentials
- Enable 2-factor authentication on your email
- Verify Rafiki's account numbers before every transfer
- Report suspicious calls or messages to support immediately
- Keep your mobile and email secure
- Review your transaction history regularly