How we protect your account and your money.
Signing in
We sign you in with a one-time code sent to your mobile or email. Codes last ten minutes, work once, and lock out after repeated wrong attempts.
Nobody at BunchMart will ever ask you for a code. Anyone who does is trying to take your account. Hang up and tell us.
Payments
Payments are processed by a PCI-DSS certified payment partner. Card and UPI details are entered on their systems, never ours. We receive only a confirmation that payment succeeded, and the confirmation is cryptographically signed so it cannot be faked.
Recognising us
Our messages come from our registered sender ID and our own domain. We never send payment links over WhatsApp, and we never ask you to install a screen-sharing app. If somebody claiming to be us does either, it is a fraud.
Reporting a problem
If you think your account has been accessed, or you have had a suspicious call, contact the help centre immediately and we will secure the account.