Layered by design

Independent controls protect access, transactions and data at every layer.

Encryption in transit and at rest

TLS protects every session, while sensitive data is encrypted at rest in segregated environments.

Continuous monitoring

Automated and human review detects unusual activity and escalates it to your team.

Step-up authentication

One-time codes and authorisation checks protect high-risk actions such as transfers and profile changes.

Real-time alerts

Instant portal and email notifications for account activity and security events.

Biometric access

Use face or fingerprint recognition on supported devices; biometric data never leaves your device.

Automatic session lock

Sessions expire after inactivity so an unattended device cannot be used to access your accounts.

Protect yourself

Simple habits that stop fraud

  • Never share your password, PIN or one-time codes - Quantessa will never ask for them
  • Use a unique password for your accounts and a password manager
  • Enable multi-factor authentication where available
  • Check your statements and alerts regularly for unfamiliar entries
  • Only sign in through qctba.com or the official Quantessa app
  • Be skeptical of urgent emails, calls or messages about your account
Report suspicious activity
Secure data centre infrastructure

Report fraud

If you suspect fraudulent activity, email fraud@qctba.com immediately. Our fraud team is available 24/7.

Freeze instantly

Customers can freeze debit and credit cards instantly from the mobile app or by contacting support.

Transfer reversals

Eligible transfers can be scheduled for automatic reversal if something goes wrong.

Zero liability

You are not liable for unauthorized transactions reported promptly on your account.

Security questions

Does Quantessa Capital Trust ever ask for my password?
No. We will never ask for your password, PIN or full card number by phone, email or text. Treat any such request as fraud and report it to us immediately.
How does the time-out on my session work?
Client Login sessions expire after 15 minutes of inactivity. You'll be returned to the login screen and must sign in again.
What should I do if I lose my phone?
Contact us immediately so we can suspend mobile access. Your funds remain safe; biometric login is tied to the device and cannot be copied.
Are my deposits insured?
Deposit products are held with insured partner institutions and are subject to applicable coverage limits and product terms. Investment products are not bank deposits, are not insured by any government agency, and may lose value. Past performance does not guarantee future results.

Secure from the first conversation

Begin a relationship with strong authentication, transaction alerts and a named team from day one.