🛡️ Security & transparency

Trust & Compliance

VerifScan is a non-custodial security tool. It reads public on-chain data to tell you whether a token is genuine or counterfeit (“flash” crypto). We never hold, move or have access to your funds.

Our guarantees

No custody
Non-custodial
VerifScan never holds, moves or has access to your assets. Verification is a read-only operation.
Read-only analysis
On-chain
We only read public blockchain data and compare token contracts against official registries.
Data protection
ICO / GDPR
Registered with the UK ICO. We collect the minimum data required and respect your GDPR rights.

Security audits

FirmScopeDateStatus
CertiKVerification engine & contract registryMar 2026✓ Passed
HackenWeb app & infrastructureJan 2026✓ Passed
Trail of BitsOn-chain data pipelineNov 2025✓ Passed

Certifications

ISO/IEC 27001
Information security
SOC 2 Type II
Operational controls
GDPR
EU data protection
OWASP ASVS
Application security

Data protection

VerifScan is built on the principle of data minimization. Connecting your wallet exposes only your public address, which we use solely to read on-chain balances and verify token contracts. We never request your private keys or seed phrase, and we never take custody of funds.

  • No private keys or seed phrases are ever requested or stored.
  • Only public on-chain data is read to perform the verification.
  • You can request access to or erasure of your data at any time.
  • Encrypted in transit (TLS 1.3); no funds are ever held or moved.