Security

Sign-in that hardens with every failure, two-step verification, face-scan identity checks, a risk engine and an encrypted credential vault.

Security layers: slow-down, then a human check, then escalating locks on failed sign-ins for customers and staff; mandatory two-step verification for sellers and staff; identity checks with an official document and a live face scan; a risk engine scoring device, country and network; bans of abusive devices and addresses; credentials encrypted with AES-256 and deleted after delivery; withdrawals paused for 24 hours after a password or 2FA change; and a permanent audit trail. Soom never asks for your password, a verification code, or payment outside the platform.