Marutap is built so a compromised agent, a leaky merchant, or a bad prompt can’t reach your money. Here’s how that holds up.
The agent never sees your card. On approval it gets a single-use card that only works for the one purchase you approved — never your real number.
Every purchase waits on a tap from your phone, confirmed with a passkey — Face ID, Touch ID, or your device PIN. There’s no password to phish.
Each credential is locked to the exact amount and merchant you saw, and dies after one charge. A leak can’t be replayed and can’t be spent elsewhere.
A hijacked agent still can’t quietly overspend: it can only ask, and what it receives is scoped to exactly what you approved. The dangerous step is always yours.
Revoke any agent from your dashboard and every credential it could ever touch stops working instantly. Cancelled subscription mandates can never be charged again.
The card you connect is vaulted by Stripe’s PCI-compliant infrastructure — your real number lives there, referenced by token, never in a database we run.
Found something? We take reports seriously and want to hear from you. Email alex@marutap.com and we’ll respond quickly.
See the full purchase flow on How it works · read our Privacy policy