HackHarvard 2025 | Cambridge, Massachusetts
36 Hours of Innovation • Visa Trust & Transparency Track

A universal MFA verification layer for secure payments with intelligent risk assessment and seamless merchant integration.

Key Features:

• Smart MFA triggers (amount, location, device, behavior)
• Multiple auth methods (SMS, Email, Duo Security)
• ~3-line code integration for merchants
• Real-time processing with MongoDB backend

• Backend: Flask API with MongoDB, intelligent risk engine
• Frontend: React TypeScript with vendor demo + integration components
• Integration: Drop-in MFA components for any payment system

# Backend
cd backend && pip install -r requirements.txt && python3 app.py

# Frontend
cd frontend && npm install && npm run dev

Visit http://localhost:5173 • Try amounts ≥$100 to trigger MFA

Merchants can add TruelyPay MFA to their existing systems with just 3 lines of code:

import { startMFA } from "./components/MFA";

const result = await startMFA({
  merchant_id: "your_merchant_id",
  api_key: "your_api_key",
  amount: paymentData.amount,
  email: paymentData.email,
});

if (result.success) {
  // Proceed with payment
}

• Risk-Based Authentication: Smart MFA triggers based on multiple factors
• Geographic Analysis: High-risk country detection
• Device Fingerprinting: New device identification
• Email Validation: Temporary email provider detection
• Challenge Expiration: Time-limited authentication windows
• Audit Logging: Comprehensive transaction tracking

Jorge Galvis Carrillo - Columbia University, CS & Math-Statistics '26
Mateo Taylor - Haverford College, CS '27
Ekin Chakma - Brandeis University, CS '27
Sushmit Chakma - Haverford College, CS '28

• Backend API - Complete setup and API reference
• Frontend Integration - Component guide and examples

Educational and development purposes only.

For the memories of these fun days and the creation the future of secure payments