What is Stripe and how secure are Stripe transactions?

What is Stripe?

Stripe is a payments and financial-infrastructure provider. uDink uses Stripe to support payment-related features, including:

• presenting eligible payment methods at checkout;
• processing paid-session transactions and refunds;
• securely saving an eligible payment method for Reserve First, Pay Later;
• onboarding and verifying organiser payment accounts; and
• moving eligible organiser funds towards their configured payout account.

Stripe Connect is the part of Stripe used by platforms and marketplaces to onboard connected accounts and manage payments and payouts between participants. You can read Stripe's explanation of how Connect works.

Stripe is a separate service provider. A Stripe screen may open from uDink when you pay, save a payment method, verify an organiser account or add payout details.

How secure are transactions on Stripe?

Stripe uses several layers of technical and operational protection:

• PCI certification: Stripe states that it is assessed annually by an independent auditor and certified as a PCI Level 1 Service Provider. PCI DSS is the payment-card industry's security standard.
• Encrypted connections: Stripe requires HTTPS and modern TLS for its services to protect data while it travels between your device and Stripe.
• Encrypted and separated card data: Stripe states that card numbers are encrypted at rest using AES-256 and kept in dedicated, isolated infrastructure. Stripe also tokenises card numbers so its other systems can work with a reference instead of the raw number.
• Fraud and authentication checks: Stripe can evaluate payment risk and may use additional verification, such as 3D Secure, when an issuer, regulation or risk check requires it.

See Stripe's current security overview and integration security guide for details.

These safeguards reduce risk, but no online payment system can guarantee that every transaction will be approved or that fraud, scams or account compromise can never occur. Your bank or payment-method provider can also apply its own security checks or decline a transaction.

What information does uDink receive?

Sensitive payment or verification information entered on a Stripe-hosted screen is submitted through Stripe's flow.

uDink receives the references, payment or payout status, limited account information and other results needed to operate its payment features. uDink does not intentionally store your full card number or card security code.

For organiser onboarding, uDink may receive limited connected-account information, capability information and verification status. Identity documents and bank details should be entered only in the Stripe-hosted process—not sent to uDink through chat or email.

How can I check that a Stripe page is genuine?

Before entering payment, identity or bank information:

1. Start the payment or onboarding process from the uDink app or an official uDink page.
2. Check that the browser shows a secure HTTPS connection.
3. Check the domain carefully. uDink's current Stripe-hosted flows can use addresses such as checkout.stripe.com or connect.stripe.com.
4. Check the session, amount and currency before confirming a payment.
5. Close the page if the address, wording or requested information looks unexpected, then reopen the flow from uDink.

Never share a one-time verification code, card security code, online-banking password or full card number through chat, email or a support message.

What if I see an unfamiliar or suspicious transaction?

1. Check the session and payment status in uDink.
2. Check the transaction description, amount and date in your bank or payment-method account.
3. Contact your bank or payment-method provider promptly if you do not recognise the transaction or believe your account is compromised.
4. Email admin@udink.app with the session details, amount, date and the last four digits of the card if needed.

Do not email screenshots containing a full card number, security code, bank login details, identity documents or verification codes.

What happens next?

You do not need to create a separate Stripe account merely to pay for an eligible uDink session. Follow the Stripe-hosted checkout shown from uDink and return to the app to confirm the final payment or reservation status.

If you organise paid sessions, follow the Stripe onboarding guide for a Singapore individual or a Singapore company.