Press

Journalists should use the press route on the Contact page. Include your outlet, your deadline, the subject of the enquiry and the specific questions you need answered. We respond to media enquiries within one business day, and sooner where a deadline requires it.

Support cannot answer media questions and press cannot answer questions about an individual account.

We will confirm factual information about the product, the markets served, the operating model and published policy. We will comment on an incident that has affected customers once we have established the facts, and we will correct an error of fact promptly and publicly.

We will not confirm information about an individual customer or account, including whether a named person holds one. We will not confirm the identity of a licensed partner in a specific market. We will not comment on a live regulatory or law enforcement matter, and we will not confirm or deny the existence of a suspicious activity report — both are prohibited by law.

Statements are attributed to a named spokesperson or to "a spokesperson for GBF Payment Services". We do not brief on background against a competitor and we do not provide anonymous comment about another organisation.

Quotes are provided in writing and may be used in full or trimmed for length provided the meaning is preserved. We ask to see the context of a quote where a story concerns customer safety or a security matter.

The wordmark and logo may be used in editorial coverage without prior permission, provided they are reproduced without modification, not combined with another mark, and not used to imply endorsement or partnership. Do not recolour, rotate, stretch, add effects to or place the mark on a low-contrast field.

Assets in the required formats are available on request through the press contact.

Security researchers should not use the press route. Report a suspected vulnerability through the security contact on the Contact page, with enough detail to reproduce the issue. We acknowledge a report within one business day and keep the researcher informed until the matter is closed.

We ask that a vulnerability is not published until a fix is available, and we will not take action against a researcher who acts in good faith, avoids customer data and does not degrade the service.