Payment Security

Your financial security is our top priority. WeWander uses industry-leading payment processors and security standards to ensure your transactions are safe.

1. How We Process Payments

Key point: WeWander does not store your payment card details. All payments are processed by Stripe (credit/debit cards) and PayPal, both PCI DSS Level 1 certified. Your card details are sent directly to the payment processor via encrypted connection — WeWander servers never see your full card number, CVV, or PIN.

WeWander does not process or store your payment card details directly. All payments are handled by trusted, PCI-compliant third-party payment processors:

  • Stripe — for credit and debit card payments (Visa, Mastercard, American Express).
  • PayPal — for PayPal balance, linked bank accounts, and cards.

When you enter your card details during checkout, they are sent directly to the payment processor via an encrypted connection. WeWander's servers never see or store your full card number, CVV, or expiration date.

2. PCI DSS Compliance

Both Stripe and PayPal are certified as PCI DSS Level 1 service providers — the highest level of certification in the payment card industry. This means:

  • Card data is encrypted using industry-standard AES-256 encryption.
  • Regular security audits and vulnerability assessments are performed.
  • Strict access controls and monitoring are in place.
  • Compliance with all 12 PCI DSS requirements is maintained and verified annually.

3. Data Encryption

All data transmitted between your browser and WeWander is protected by TLS (Transport Layer Security) encryption. This includes:

  • Payment information during checkout.
  • Login credentials and personal data.
  • Communication between you and tour operators.

You can verify the secure connection by looking for the padlock icon in your browser's address bar.

4. What We Store

WeWander stores only the minimum payment information necessary for order management and customer support:

  • First 6 and last 4 digits of your card number (for identification purposes).
  • Card brand (Visa, Mastercard, etc.).
  • Payment confirmation status and transaction ID.
  • Transaction amount and date.

We never store your full card number, CVV/CVC code, or PIN.

5. Fraud Prevention

Key point: WeWander uses Stripe Radar (machine learning fraud detection), 3D Secure (3DS) authentication, Address Verification (AVS), and automated suspicious activity monitoring to protect every transaction.

We use multiple layers of fraud detection to protect both travelers and operators:

  • Stripe Radar — machine learning-based fraud detection that analyzes thousands of signals per transaction.
  • 3D Secure (3DS) — additional authentication step for card payments where supported by your bank.
  • Address Verification (AVS) — checks that the billing address matches the card issuer's records.
  • Suspicious activity monitoring — automated and manual review of unusual transaction patterns.

6. Secure Payouts to Operators

Tour operators receive payouts through their connected Stripe or PayPal accounts. Operator banking details are stored securely by the payment processor, not by WeWander. All payout transfers are encrypted and audited.

7. Your Responsibilities

To help keep your payments secure:

  • Never share your WeWander password or payment details with anyone.
  • Use a strong, unique password for your account.
  • Log out after using shared or public devices.
  • Monitor your bank statements for unauthorized charges.
  • Contact us immediately if you notice suspicious activity on your account.

8. Reporting Security Issues

If you suspect unauthorized access to your account, a fraudulent charge, or any security vulnerability, please contact us immediately:

Email: info@wewander.tours

Subject line: Include "Security Issue" or "Unauthorized Charge" for priority handling.

We aim to respond to security-related inquiries within 24 hours.

9. Related Pages