Skip to main content

Card security

How to manage how Expend cards can be used for payments

Expend takes card fraud and fraud prevention seriously, and we give administrators the tools to specify the ways each Expend card in their company can be used. You can turn individual card facilities on and off to ensure that cards can only be used according to your company’s requirements.

You can turn the following on or off:

  • The card’s magnetic stripe, used for swipe transactions (turned off by default – read more below)

  • Contactless transactions

  • Online transactions – making payments on the Internet

  • ATM cash withdrawals

You can also:

  • Lock the card to stop it from being used for any payment transactions.

  • Set a memorable word, which may be used to verify your identity for online transactions.

ℹ️  Administrators: To find more information on how to change an individual user’s card settings, as well as settings for all cards in your organisation (Expend Visa card only), please see Card security for Administrators.


Changing card security settings

In the web app

To manage a card’s security settings, do the following:

  1. Open the sidebar menu, go to CARDS & PAYMENTS, and click Expend Cards.

  2. Find the card you want to manage, and click the ⚙ (Card Security Settings) button on the right.

  3. Turn the required settings on or off.

  4. Click the Close button when you are done.

Changes are applied immediately.

In the mobile app

You can change some of your own card’s security settings in the Expend app, and view all current settings. To manage your card security settings:

  1. Go to the Cards screen and select your card.

  2. Turn the required settings on or off.

Some settings cannot be changed in the app. These can be changed by a user with the Admin role in the web app.


Setting your memorable word / card password

To enhance the security of your account and for regulatory compliance, you are required to set a memorable word (Expend Mastercard card) or card password (Expend Visa card) for identity verification. This will be used to verify your identity when making some online transactions.

You can change your memorable word / card password at any point, by following the steps below.

Expend Mastercard card

In the web app

  1. In the menu on the left, click Expend Cards.

  2. Ensure that Expend Mastercard Cards is selected at the top of the page.

  3. Go to your cards and click the Change Memorable Word button in the upper right corner.

  4. Enter your memorable word and confirm.

In the mobile app

  1. Tap Cards and go to your Expend Mastercard card.

  2. Tap Password.

  3. Select Change Memorable Word.

  4. Enter and confirm your memorable word, then tap Confirm memorable word.

Expend Visa card

In the web app

  1. In the menu on the left, click Expend Cards.

  2. Ensure that Expend Visa Cards is selected at the top of the page.

  3. Go to your cards and click the Change Card Password button in the upper right corner.

  4. Enter your card password and confirm.

In the mobile app

  1. Tap Cards and go to your Expend Visa card.

  2. Tap PIN & Password (or just Password for a virtual card).

  3. Select Change Card Password.

  4. Enter and confirm your card password, and then tap Confirm card password.

Please note:

  • If you have multiple cards, the memorable word / card password you entered is set for all of your cards for the current organisation.

  • If you belong to multiple organisations, a memorable word / card password must be set separately for each organisation’s cards.


More about the magstripe

A card’s magnetic stripe can be cloned and the cloned card used for swipe transactions. If the magnetic stripe setting is turned off, it shouldn’t be possible to use a card that was cloned from the original.

Since it is relatively easy to clone a card in this way, the card magnetic stripe is turned off by default. It can be turned on when a cardholder needs to pay for something with a swipe transaction. The magstripe will remain on for 24 hours at a time, after which it will automatically be turned off again. However, we recommend that you turn it off again as soon as the swipe transaction has been performed.

Did this answer your question?