Security Policy
Your safety is our highest priority. Here's how we protect your account and transactions.
256-bit SSL PCI-DSS Fraud Detection RBI Compliant
Platform Security Infrastructure
256-bit SSL/TLS
All data encrypted in transit using HTTPS
PCI-DSS via Razorpay
Card data never touches our servers
24/7 Monitoring
Automated anomaly & fraud detection
OTP Verification
2-step login and transaction auth
Encrypted Storage
Passwords hashed with bcrypt
Rate Limiting
Brute-force & spam protection
Payment Security
All payments on MantoshShop are processed exclusively through Razorpay — India's most trusted and RBI-regulated payment gateway.
- We never see or store your card number, CVV, or net banking credentials
- Razorpay is PCI-DSS Level 1 certified (highest standard)
- All payment pages use HTTPS with valid SSL certificates
- 3D Secure (Verified by Visa / Mastercard SecureCode) supported
- UPI transactions verified through NPCI's secure infrastructure
If you notice any unauthorized charge from MantoshShop, contact us at support@mantoshshop.com immediately. We will investigate and resolve within 48 hours.
Fraud Prevention & Detection
MantoshShop employs multi-layer fraud detection to protect both buyers and sellers:
- Automated systems flag suspicious order patterns and unusual account activity
- Device fingerprinting to detect account takeover attempts
- IP-based geolocation anomaly detection
- OTP verification for high-value transactions and new device logins
- Rate limiting on login attempts to prevent brute-force attacks
MantoshShop will NEVER ask for your OTP, password, or card details via phone, SMS, or email. Any such request is a phishing attempt — report it immediately.
Account Security Best Practices
Protect your MantoshShop account by following these guidelines:
- Use a strong, unique password — minimum 8 characters with numbers and symbols
- Never share your OTP, password, or account details with anyone
- Use a secure, private email address for registration
- Always log out after using MantoshShop on shared/public devices
- Only access MantoshShop via official URLs — beware of phishing sites
- Keep your registered phone number active for OTP delivery
- Check for the padlock icon (HTTPS) in your browser before entering any data
Reporting Security Issues
We take security vulnerabilities seriously and appreciate responsible disclosure from the security community.
- Bug Bounty: Report genuine security vulnerabilities to security@mantoshshop.com
- Account Compromised? Email support@mantoshshop.com immediately for account lock
- Unauthorized Transaction? Contact us within 24 hours for investigation
- Phishing/Fraud Attempt? Report via support and to cybercrime.gov.in
Our security team responds to critical reports within 4 hours and resolves confirmed vulnerabilities within 48 hours.
Compliance & Certifications
MantoshShop operates in compliance with the following Indian regulations and standards:
- Information Technology Act, 2000 — Section 43A (Data Protection)
- Digital Personal Data Protection Act (DPDP), 2023
- Consumer Protection (E-Commerce) Rules, 2020
- RBI Guidelines for online payment security
- IT (Reasonable Security Practices) Rules, 2011