Security at ONE
At ONE, your account security is paramount. We implement the following to keep your ONE account secure.
ONE protects data in transit and at-rest with industry-leading, 256-bit AES level encryption. We use and support biometric identification to open the ONE app, such as Face ID and fingerprint authentication.
ONE customers may receive alerts regarding actions taken on their account. To receive and action these alerts, turn on notifications during account setup or in your phone's settings.
Instantly block transactions
If your ONE card is lost or unauthorized use is suspected, you can block all your ONE card transactions. Open the ONE app, tap on the icon in the top-right corner, then tap "Report Lost or Stolen card" to disable transactions and immediately prevent new debit purchases or ATM withdrawals.
What is Phishing?
Phishing is when a scammer sends a message designed to trick a victim into revealing sensitive personal information or allow the scammer to plant malicious software into the victim’s accounts.
Please be aware that ONE will never ask for any sign in information or any other bank account information, such as your account number, Social Security number, verification codes, or account passwords. Any email correspondence from ONE will be sent from an address ending in @onefinance.com or @one.app.
Responsible Disclosure for Security Researchers
ONE is committed to protecting the confidentiality, integrity, and availability of our customer's data. We value collaboration with the security research community and welcome reports of potential vulnerabilities through ONE's Vulnerability Disclosure Program (VDP). Reports may be sent to firstname.lastname@example.org. We ask all researchers to operate in good faith and to notify us as soon as possible once a potential vulnerability is found. We also ask that researchers adhere to the below rules:
- Do not publicly disclose vulnerabilities or discuss them outside the VDP without prior consent from ONE.
- Do not perform denial of service (DoS or DDos) tests or other tests that could potentially impair access to ONE's systems.
- Do not perform tests or actions which have the possibility of viewing, modifying, or destroying other users' data.
Social Community Guidelines
We ask that all community members who engage with our social platforms do so in a respectful way. We will always do our best to listen to our community’s feedback, answer your questions honestly, and be as transparent as possible about information sharing. If you post to any of our social platforms, you agree to abide by our community guidelines (as described in detail below). ONE reserves the right to moderate its community platforms and to determine what content, comment, or account should be removed or blocked. The opinions, statements, and viewpoints expressed in the comments on ONE’s posts are from the community members—including ONE employees or partners—and do not necessarily reflect the views of our company. They are the author’s responsibility and reflect the view of the community member who posts the comment.
ONE strives to create an engaging, informative, and supportive community. We will do our best to moderate and quickly respond to comments and feedback; however, we can’t guarantee that we’ll reply to every comment. Generally, we check the community threads several times during business hours and as time permits on non-business days (weekends and observed holidays).
Every member can help us keep our community safe. If you see something that may violate our guidelines, please help us by direct messaging our account on that social platform. Our team will address the content in question and decide how to move forward. We want to note that other community members may express comments on one or any of our platforms that you might disagree with but are not in violation of our community guidelines. We ask that all users engaging on our platforms read our community guidelines:
KEEPING PERSONAL INFORMATION SAFE
For the safety of our community, you may not publish or post personal information of others on the platforms (for example, full name, job title, where that person lives or works, private contact information such as phone number or email, etc.) We will remove comments that include personal information.
This is a public community, and others can view anything you post. You should not post personal or sensitive information you would not want to publicize. For example, you should never post your Social Security number, account number, passwords, PINs, or other non-public personal information on any of our social media channels.
Remember that your posts are subject to the website’s privacy and data security practices and policies. Even if you delete a post later, it may have already been viewed by others.
CUSTOMER SERVICE INQUIRIES
We’re currently staffed 9 a.m. - 9 p.m. ET, 7 days a week. If you are a ONE customer with a specific question about your account, you can get help by:
- Submitting a help ticket email
- Using our in-app chat available from the Profile -> Chat button 24/7
We have a presence in various social media/social networking outlets and may occasionally identify and respond to customers seeking assistance with account-related issues. Suppose you receive such a communication from us regarding a service request or other need. In that case, you may be offered other ONE channels to help address those concerns as smoothly and effectively as possible.
LOCAL AND FEDERAL LAWS
You may not use the platforms for any unlawful purpose or to further illegal activities. We will remove any comments that appear legally objectionable or encourage and/or condone a criminal offense of any form. You may not promote violence against, threaten, or harass other people. We will not tolerate any form or threat of violence or harassment. Any user found to be in violation will have any and all comments removed and will be blocked from the platforms.
REPETITIVE COMMENTS, SPAM, AND BOTS
You may not engage in spamming (repetitive, personal promotion, third-party promotion of sites, initiatives, or products). Accounts found to be engaged in such activity will have their comments removed and blocked from the platform if necessary.
For your online safety, avoid opening any third-party links unless you trust the source. These links may pose a risk to your computer or take you to inappropriate sites.
VULGAR, MISLEADING, OR OBSCENE COMMENTS
We encourage open, honest dialogue with us and within our community comments. Any account posting disrespectful or hateful comments will have any and all comments removed and will be blocked from the platforms. We reserve the right to determine what content, comment, or account should be removed.
You may not post obscene, misleading, explicit, vulgar, harassing, culturally-, racially-, or socially-insensitive comments on the platforms. We may delete comments or posts that we deem to be:
- Profane, obscene, vulgar, inappropriate, disruptive, or unrelated.
- Indecent, sexually explicit, or pornographic material of any kind—including masked profanity where symbols, initials, intentional misspellings, or other characters are used to suggest profane language.
- Threats; personal attacks; abusive, defamatory, derogatory, or inflammatory language; or stalking or harassment of any individual, entity, or organization.
- Discriminatory or containing hateful speech of any kind regarding age, gender, race, religion, nationality, sexual orientation, gender identity, or disability.
- False, inaccurate, libelous, or otherwise misleading in any way.
ENDORSEMENTS AND SPONSORSHIPS
We may occasionally post links to third-party sites or share content. Please note that this does not in any way constitute an official endorsement of the individual, website, or company.
In addition, ONE has many advertising relationships. Some linked third-party sites may contain content from sponsors, or sponsorships, paid by ONE. These paid sponsors may disclose this relationship on their websites or in their social media posts.
ONE is a financial app that helps you save, spend, and grow your money — all in one place.
ONE investors include Walmart and Ribbit Capital. Banking Services and ONE card provided by Coastal Community Bank, Member FDIC.