How Buyer Protection works
Every order on Diilzo is covered by escrow protection. Your payment does not go straight to the seller — it is held safely until your order is delivered:
- You pay at checkout. Your money is held in Diilzo's escrow account, not released to the seller yet.
- The seller ships your order. You can track progress from My Orders and message the seller directly.
- You confirm delivery. When your items arrive as described, you confirm — or the protection window lapses — and escrow releases the funds to the seller.
- Something wrong? Open a dispute. If the order never arrives, is damaged or isn't what you ordered, open a dispute before confirming delivery. Funds stay frozen while our team reviews it, and you receive a refund to your original payment method when the dispute resolves in your favour.
Your protection only covers payments made on Diilzo. If a seller asks you to pay them directly — by personal mobile money, bank transfer or any channel outside checkout — decline and report it. Off-platform payments cannot be refunded.
Payment security
Cards processed by Stripe
Visa and Mastercard payments run through Stripe, a PCI-DSS Level 1 certified processor. Your full card number never touches Diilzo's servers.
Mobile money stays with the telecom
MTN Mobile Money and Airtel Money payments are approved on your own phone with your own PIN. Diilzo never sees, asks for or stores your mobile money PIN.
Cash on Delivery
Pay the rider when your order arrives. Inspect the parcel first — once you accept and pay, returns follow the normal refund process.
Encrypted end to end
Every page and API call on Diilzo runs over HTTPS. Payment forms, checkout and your account data are encrypted in transit.
Account security
- Two-factor authentication (2FA) — turn it on in your account settings and every sign-in also requires a one-time code sent to your email.
- Hashed passwords — passwords are stored with strong one-way hashing; not even Diilzo staff can read them.
- Session protection — signed session cookies with CSRF tokens on every form and API mutation block forgery and hijacking attacks.
- Sign-in alerts & throttling — repeated failed logins are rate-limited and unusual activity triggers verification.
Secure your side too: use a unique password you don't reuse anywhere else, enable 2FA, and sign out on shared devices.
How we vet sellers
- KYC verification — sellers submit business details and identity documents before they can fully operate and withdraw payouts.
- Verified badges — verified stores show a badge earned through document checks and trading history.
- Escrow payouts — sellers only get paid after buyers confirm delivery, which removes the incentive to scam.
- Ongoing monitoring — listings, reviews and dispute rates are monitored; sellers who break the rules lose selling privileges.
Safe-shopping checklist
- Always pay through Diilzo checkout — never send money to a seller directly.
- Check the store's rating, reviews and verified badge before ordering.
- Read the full product description; if a price looks too good to be true, be careful.
- Keep order chats on Diilzo — they're evidence if you open a dispute.
- Inspect parcels on delivery where possible and confirm delivery in the app only when satisfied.
- Open a dispute promptly if something is wrong — don't wait for the protection window to lapse.
- Never share your password, verification codes or mobile money PIN. Diilzo will never ask for them.
Report a problem
Suspicious listings, phishing messages, a seller asking for off-platform payment, or a security vulnerability in the site itself — tell us at support@diilzo.com or via the contact page. Security researchers: we appreciate responsible disclosure and will acknowledge your report.
Lost money to a fraudulent order? Open a dispute from the order page first — escrow holds mean most losses are recoverable when reported quickly.
