Humans review every campaign. Rwanda regulates every payment.
Crowdfunding only works if donors trust the ledger. We over-invest in T&S because one high-profile fraud case would undo years of work. Here's exactly what we do — both the boring parts you hope never to notice, and the places we've deliberately chosen to be slower and stricter than our competitors.
Human reviewed
100%
Every campaign reviewed before it goes live — not just high-risk ones
Multi-approval
5M RWF+
Withdrawals above this threshold require two T&S approvers
Direct-to-hospital
Default
Medical campaigns can disburse straight to the hospital — no cash-out
BNR-supervised partners
Always
Every payment partner is Bank of Rwanda-regulated
Before a campaign goes live
Four checks. One Trust & Safety decision.
Story & beneficiary
Does the campaign story check out? Is the beneficiary a real person or institution, and does the campaigner have a stated relationship to them?
Campaigner identity
Email confirmed. Phone confirmed. For larger goals (over 2M RWF), NIDA national-ID verification before funds can be withdrawn.
Supporting documents
For medical campaigns, a hospital letter or invoice. For education, a school invoice or admission letter. For NGOs, RGB registration. PDF uploads, reviewed by a human.
Risk scoring
Signals from account age, donation patterns, beneficiary verification, and prior campaigns combine into a risk score. Low-risk campaigns move quickly; high-risk ones get extra scrutiny or a conversation.
Security
Payment details encrypted. Webhooks verified. Access audited.
AES-256-GCM at rest
Withdrawal destination details (bank accounts, MoMo numbers, institution payout info) are encrypted with an authenticated cipher before they touch the database. Even direct DB access doesn't reveal them.
Signed webhooks, verified twice
Every payment provider webhook is signature-verified before we trust it. For MoMo (which doesn't sign payloads), we re-fetch the authoritative transaction status from MTN's API before marking a donation successful.
Full audit log
Every approval, rejection, withdrawal, and campaign state change is timestamped with the actor and stored immutably. When you read a campaign's activity, that's not marketing — it's the actual ledger.
Anti-fraud
Specific mechanisms — not vague promises.
Direct-to-institution disbursement
For medical and education campaigns, you can (and in most cases we recommend) routing funds directly to the hospital or school under a reference number. The campaigner never touches the money — removing the single biggest fraud vector in online giving.
Multi-approval over 5M RWF
No single T&S reviewer can push through a 5M RWF+ withdrawal alone. Two approvers required. Every approval is audit-logged by name, time, and note.
Webhook rate limiting + IP allowlist
Payment provider webhooks are rate-limited at 200 requests/minute per source IP. MoMo webhooks additionally require the request to come from MTN's published egress ranges — not just any server that knows our endpoint URL.
Idempotent state transitions
Every payment event is keyed to a unique idempotency key. A replay attack or accidental re-delivery can't double-credit a campaign — the second attempt is a no-op.
Refund reversal
When a donation is refunded by the payment provider, we automatically decrement the campaign's raised total. No manual reconciliation windows where the public progress bar lies.
NIDA verification (coming Q3 2026)
Integration with Rwanda's national ID registry for campaigner identity verification at withdrawal time. Stored as an encrypted blob + irreversible hash for lookup.
Compliance
Regulated, registered, and in dialogue with BNR.
Turikumwe operates under Rwandan law. We're RGB-tracked, work through BNR-supervised payment partners (MTN Mobile Money, Flutterwave, Stripe), and maintain a compliance counsel on retainer to keep us aligned with Rwanda's evolving fintech rules.
Company registration
Registered with Rwanda Development Board (RDB)
Payment partners
MTN MoMo · Flutterwave · Stripe — all BNR or equivalent jurisdiction regulated
Institutional verification
NGO beneficiaries verified via Rwanda Governance Board (RGB)
Data protection
Rwanda Data Protection Law 058/2021 — we keep only what we need, encrypt what we keep
AML / KYC
Identity verification scales with campaign size; NIDA integration in progress
See something that doesn't add up?
If a campaign looks fraudulent, a donation didn't settle, or a disbursement hasn't arrived — tell us. We take reports seriously and investigate every one.
Typical response time: under 4 business hours during Kigali working hours (08:00–18:00 CAT). For active-harm cases (e.g. a live campaign you believe is fraudulent), mark the subject line URGENT.