Trust Center
Airwallex is committed to upholding a strong security presence as well as complying with legal and regulatory requirements. Information Security remains at the heart of everything we do and is embedded within the Airwallex culture.
We have uploaded our Cyber Security Insurance Certificate as an optional download. The current Insurance Certificate is valid until 24-July-2024.
Airwallex is committed to building a strong relationship with the information security community. In order to reward the best external contributions that help us keep our users safe, we maintain a Bug Bounty Program for Airwallex owned web properties. Starting from 13/07/2021 the Airwallex Bug Bounty Program is invite only. Issues submitted to bugbounty@airwallex.com will be handled based on priority.
Services in scope
Any Airwallex owned web service that handles reasonably sensitive user data is intended to be in scope. This includes virtually all the content in the *.airwallex.com domain.
Qualifying vulnerabilities
Any design or implementation issue that substantially affects the confidentiality or integrity of user data is likely to be in scope for the program. The program is limited to technical vulnerabilities in Airwallex owned / used web applications. Please do not attempt to carry out DoS or DDoS attacks, social engineering, spamming or do other similarly questionable things.
For more information please visit Airwallex Bug Bounty Program
If you think you may have discovered a vulnerability, please send us a note.