-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Optio Incentives OpenPGP keys
https://openpgpkey.optioincentives.com/keys/
Updated: 2026-10-08

This file lists every OpenPGP key Optio Incentives uses. It is signed with
the Optio Incentives Security key below. A signature only proves the file
was not changed after signing. Before you trust a key, confirm its
fingerprint with Optio through a second channel: a phone call to a person
you know at Optio, or a fingerprint you received from us earlier.


1. Optio Incentives Security

Purpose:      General key for sending secrets to Optio: integration keys,
              SFTP logins, vulnerability reports. Use this key unless
              Optio has told you to use a specific one.
User ID:      Optio Incentives Security <security@optioincentives.com>
Fingerprint:  491B F2D1 A899 FE77 AAD4 F328 5385 7474 5495 C885
Subkey [E]:   A1D8 EA16 0DBC 1D48 CA6E F8F6 3CC9 4D4E B027 DB40
Algorithm:    RSA 4096 (primary key [SC], encryption subkey [E])
Created:      2026-10-08
Expires:      2028-10-08
Public key:   https://openpgpkey.optioincentives.com/keys/optio-security.asc
WKD:          gpg --auto-key-locate clear,wkd --locate-keys security@optioincentives.com


2. Optio Financial Services Limited - HSBC API

Purpose:      Integration key for HSBC Global Payments Solutions. Used only
              for that integration.
User ID:      Optio Financial Services Limited - HSBC API <security-ofs@optioincentives.com>
Fingerprint:  E7C6 9D34 674F FA73 EFC7 44D4 BA1C 8CEA 34C6 5D80
Subkey [E]:   AD42 2E99 C41A 255D 657E E817 9D5F CB0B A252 D765
Algorithm:    RSA 4096 (primary key [SC], encryption subkey [E])
Created:      2026-10-08
Expires:      2028-09-30
Public key:   https://openpgpkey.optioincentives.com/keys/optio-ofs-hsbc-api.asc
Note:         An earlier user ID on this key, <security@optioincentives.com>,
              was revoked on 2026-10-08. The fingerprint did not change.
              This key is not published in WKD.


How to verify this file

  gpg --auto-key-locate clear,wkd --locate-keys security@optioincentives.com
  gpg --verify keys.txt

Then compare the fingerprints above with ones you got out of band.
-----BEGIN PGP SIGNATURE-----
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=AcmT
-----END PGP SIGNATURE-----