Volet is a popular payment system for convenient international payments and transactions with cryptocurrencies. Millions of people around the world use the Volet payment system services daily Volet has been cooperating with Protectimus since 2015, and we are extremely pleased with the results of this cooperation. Over the past years, we’ve had only positive cases of working together. Protectimus helped us at every stage, from integration to adding additional features that solved our specific tasks. For example, when we decided to abandon SMS as the two-factor authentication method, Protectimus suggested using chatbots in instant messengers to deliver one-time passwords, which is much easier, cheaper, and safer than SMS. For the entire period of using Protectimus 2FA, we receive service in the 24/7 format without any breakdowns or other issues, and the Protectimus support services are beyond praise. Using Protectimus, we are confident that Volet infrastructure and users are well protected. Protectimus gives us what money can’t buy – not a sense of security, but REAL security. I highly recommend it for implementation. Artem Sh., Information Security Director at Volet Key tasks for implementing 2FA for Volet The administrators of the Volet payment system set the following tasks for the two-factor authentication (2FA) provider To protect the accounts of Volet employees with 2FA. To protect the accounts of end users of the Volet payment system with 2FA. To add an additional layer of protection against phishing and data spoofing. To provide a choice of different types of 2FA tokens for Volet payment system end users. To organize targeted delivery of hardware 2FA tokens to the end users of the payment system. To find a way to deliver one-time passwords to the Volet end users that will be as convenient as SMS, but at the same time more secure and less expensive. The following Protectimus 2FA products were chosen to solve the above mentioned tasks Protectimus Cloud Two-Factor Authentication (2FA) Service; Users groups functionality is realized using the Resources; Geographic filters; IP filtering function; CWYS (Confirm What You See) data signing function; Classic hardware 2FA tokens Protectimus Two; Application for generating one-time passwords Protectimus Smart OTP (iOS and Android); Delivery of one-time passwords via Protectimus Bot chatbots in Telegram, Facebook Messenger, and Viber. Challenges and Solutions To perform the integration using API The functionality of integration with Protectimus two-factor authentication (2FA) service via API is available even for the free service plan. API integration documentation is publicly available on the Protectimus website. The Protectimus team is also ready to connect with the customer to help with the integration remotely, if necessary. To set different two-factor authentication (2FA) rules for the Volet employees’ accounts and payment system end users’ accounts The Protectimus two-factor authentication (2FA) service allows dividing users into groups using Resources. Volet administrators have created two 2FA Resources – one for the end users and another for company employees. These Resources have different security rules. For example, geographic filters and IP filtering are activated for the Volet employees. Besides, they can use only hardware 2FA tokens. At the same time, filters are not activated for the Volet end users, but the data signing function CWYS (Comfirm What You See) is. Also, the Volet end users have the opportunity to choose one of three types of 2FA tokens: hardware OTP tokens, 2FA apps, or 2FA chatbots Protectimus Bot in Telegram, Viber, Facebook Messenger. To provide an extra layer of protection against phishing and data spoofing The Protectimus CWYS (Confirm What You See) function is a powerful protection tool against phishing, data spoofing, man-in-the-middle attacks, and similar hacking techniques. When the Protectimus CWYS function is activated, the unique data of the user...