# 3.5 Security & Anti-Fraud

* Only minimal data is collected: merchant name, amount, date/time, card brand/issuer.
* Data is encrypted and handled under least-privilege access.
* **KYC (identity verification)**: Usually not required, except for:
  * SyFu Card usage
  * Lifting withdrawal restrictions in case of suspicious activity

**Prohibited actions**

* Using cards for chargebacks or cash-out abuse
* Fraudulent behavior may result in **account ban, asset freeze/confiscation, withdrawal restrictions, and potential claims for damages**