However, human nature being what it is, we've built a few safeguards to mitigate the risk of a lost or stolen phone:
1) instant phone lock - once you realize that your phone is missing, you can instantly "lock" your XIPWIRE account online with the click of button. A locked account will not allow any payments to be made.
2) email receipts - after every payment transaction, the payer and payee receive a text notification and an email receipt. If you didn't realize your phone was missing, the email message would alert you that an unauthorized transaction just occurred and prompt you to lock your account.
3) account limits - per transaction and daily limits on person to person transfers prevent large sums of money from being transferred in a single transaction. Increasing the number of transactions to execute the fraud also increases the risk of the fraud being exposed.
4) bank account verification - in this example, for Carol to make use of the stolen funds, she would have had to link a bank account to her XIPWIRE account. The bank account details would need to be verified using a micro-deposit transaction. Knowing Carol's bank account information gives authorities the ability to trace the funds to a specific individual.
5) Instead of xipping the money to Carol, if Alice decided to make a purchase at a merchant that accepts XIPWIRE, the Security Photo Verification mechanism, which displays a photo of the XIPWIRE user initiating a payment on the merchant's POS system, would instantly alert the merchant that the someone other than the legitimate owner of the XIPWIRE account was attempting to make a purchase and would decline the transaction.
While fraud can never be eliminated, we believe that education and personal responsibility (i.e. deleting the PIN from your phone's send history) combined with multiple layers of protection can minimize the risk associated with a lost or stolen phone.