How Paysavo protects your saved bank recipients from tampering
Once you've saved a bank recipient, Paysavo always uses the bank/account details stored on your account for that recipient — not any details a request might try to substitute — and no one else can view, edit, or delete your saved recipients, even by guessing an ID.
On this page
When you send money to a saved recipient, Paysavo doesn't trust whatever recipient details happen to arrive with that particular request — it looks up the recipient you saved and uses those stored details instead, every time. This matters because it means a saved recipient's bank details can't be silently substituted or altered by a compromised or malicious request at send time; the account and routing details that actually move your money are the ones you saved when you added that recipient, full stop.
What this protects against
- Tampering at send time — even if something tried to sneak in different account details alongside a "send to saved recipient" request, Paysavo rebuilds the payout using your stored recipient's real details, not the substituted ones.
- Guessing your way into someone else's recipients — editing or deleting a saved recipient only works on a recipient that belongs to your own account. Trying to act on a recipient ID that doesn't belong to you returns the same "not found" response whether that ID exists on someone else's account or doesn't exist at all — so it's not possible to tell the difference by guessing IDs.
What you should still do
This protects the mechanics of sending, but it can't tell if the details you saved were wrong in the first place. Review your saved recipients periodically, especially ones you haven't used in a while, and see the guide on common beneficiary-detail mistakes for how to catch a wrong account before it costs you a transfer.
Still need help? Contact Paysavo support.