Frequently Asked Questions

You’ll need a U.S. company with a federal EIN, your company’s official formation documents, and a picture of your government ID (e.g. a passport or US driver’s license).

We can accept most U.S. companies that aren’t money services businesses or involved with adult entertainment, marijuana or internet gambling. Our product is geared towards tech companies, so it might not be the best fit for some other businesses, especially ones that frequently deal with physical cash. We also can't open accounts for sole proprietors or trusts.

Mercury makes security a top priority. Some things we do to ensure your account safety include:

• Requiring HTTPS on all pages, and use HSTS to ensure browsers only ever connect to us over a secure connection.
• Employing a third party to perform penetration testing each year to check for vulnerabilities.
• Storing passwords hashed with the bcrypt algorithm. We never store or log your plaintext password.
• Using Time-based One Time Passwords for two-factor authentication. We never send authentication codes via insecure channels like SMS.
• Encrypting our database and all uploaded images. We employ additional encryption for sensitive data, like social security numbers.
• Never storing your debit card number.

We use your SSN solely to verify your identity. We do not check your credit score or perform any credit checks.

Mercury makes security a top priority. Some things we do to ensure your account safety include:

• Requiring HTTPS on all pages, and use HSTS to ensure browsers only ever connect to us over a secure connection.
• Employing a third party to perform penetration testing each year to check for vulnerabilities.
• Storing passwords hashed with the bcrypt algorithm. We never store or log your plaintext password.
• Using Time-based One Time Passwords for two-factor authentication. We never send authentication codes via insecure channels like SMS.
• Encrypting our database and all uploaded images. We employ additional encryption for sensitive data, like social security numbers.
• Never storing your debit card number.

Authy and Google Authenticator are two-factor authentication apps that we use to make logging into your account more secure. Authy and Google Authenticator work by generating codes that are unique to the device they’re downloaded on, providing an extra layer of verification that the actual account owner is attempting to log in.

Text message two-factor authentication can be compromised by hackers who port your phone number (referred to as a “Port-Out Scam”). We require Authy or Authenticator as an alternative as they can’t be compromised in this way.

Your physical debit card will arrive in a white envelope to your business address after your account is approved. You can also create and use virtual debit cards immediately.

Go to your Mercury dashboard and find your debit card under its associated account page. You’ll be able to change your PIN from that page.

You can replace your card by going to your Mercury dashboard, finding your debit card under its associated account page, and clicking Replace Card.

Yes, you do.

Your savings account doesn't currently have a limit to the number of transfers you can make. This federal regulation was changed during the COVID-19 pandemic from an original limit of 6 transfers per month.

Mercury Treasury is an automated cash management account. It allows you to put your extra cash into U.S. Government securities and money market funds for improved yield and security.

Your Treasury account has $500,000 SIPC insurance.

There is no maximum, but if you are investing >$200m, please check with us first.

Yes, you can invite as many team members as you want to your Mercury account.

We’re fully integrated with Quickbooks and Xero and can automatically sync your transactions to both tools.

Yes, we have bookkeeper accounts which give access to your transaction history and statements, but cannot initiate any money movements or change user permissions.