Lili uses industry standard encryption for all critical data in transit and at rest, mandatory two-factor authentication (2FA) using an authenticator app, biometric login on mobile, real-time transaction alerts, and per-card freeze controls. Lili uses app-based authentication and layered security controls designed to help protect customer accounts. Transfer limits also serve as a protection layer. Daily/monthly and per-transaction limits on ACH, wires, and card spend reduce exposure from any single fraud event – and can be adjusted upward with verification for legitimate high-volume operations.