Overview
This company is a leader in corporate payments, commercial fuel cards, and automated toll systems across Brazil and Latin America. Its digital platform handles millions of daily transactions, fleet account logins, driver app authorizations, and balance recharges for commercial fleets, logistics operators, and individual drivers.
Payment environments move fast. They need strong protection against automated fraud, plus instant verification for real drivers and fleet managers. In commercial fintech and toll payments, every millisecond of friction affects conversion and driver mobility.
The Challenge
Protecting fuel payment gateways, toll billing systems, and fleet management portals created security risks and user friction at the same time:
- Targeted financial bot attacks. Payment endpoints, account portals, and toll top-up engines were prime targets for credential stuffing, carding, balance-checking scripts, and fraudulent recharge attempts.
- Friction for drivers and fleet managers. Vehicle operators, logistics managers, and business administrators need uninterrupted access to portals and checkout. Image-based CAPTCHAs caused mobile app drop-offs and delayed fuel and toll authorizations.
- Heavy peak-hour traffic. Toll top-ups and fleet fuel allocations spike during commuting and logistics rush hours, so the platform had to stay available under load.
- Strict privacy and accessibility rules. Fintech platforms in Latin America must follow data privacy laws such as Brazil’s LGPD, along with international accessibility standards for web and mobile interfaces.
The Solution
The company deployed MTCaptcha across its web and mobile account platforms to protect high-value payment endpoints without hurting conversion. Each challenge was addressed directly:
- Invisible verification for smooth payments. Visual puzzles used to interrupt driver workflows and lower mobile payment conversion. MTCaptcha now analyzes behavior and runs background proof-of-work checks in real time, verifying over 95% of legitimate users invisibly. Drivers get instant toll top-ups and easy account access.
- Adaptive proof-of-work against carding and credential stuffing. Bots regularly hit balance lookup tools, login portals, and card recharge endpoints with credential-testing scripts. MTCaptcha applies dynamic, client-side proof-of-work challenges to high-risk requests. This forces bot operators to spend heavy computing effort on every attempt, which makes automated fraud far more expensive to run.
- Low latency at high volume. Rush-hour toll recharge traffic had overwhelmed traditional challenge systems and caused timeouts. MTCaptcha pairs a lightweight client script with edge-optimized verification infrastructure to handle traffic spikes with sub-100 ms response times.
- LGPD privacy and WCAG 2.1 AAA accessibility. MTCaptcha collects no personally identifiable information and sets no cross-site tracking cookies. It also meets WCAG 2.1 AAA accessibility out of the box, with full keyboard navigation, screen-reader support, and audio challenges.
The Results
By adding Enterprise MTCaptcha to its corporate payment and electronic toll platforms, the company strengthened the security of its financial endpoints and made the experience smoother for millions of drivers.
Business Impact
With MTCaptcha, the company protected its high-value payment and toll recharge systems against automated attacks and met strict regional compliance requirements. Drivers and fleet managers now get a fast, effortless payment experience across the whole fleet network.