What is an anti-phishing code and how do I set it?

Last updated: 2026-10-15

An anti-phishing code is a private code you choose that Xoibit includes in the emails we send you. If an email claims to be from Xoibit but does not show your code, it is fake.

Why does it help?

Phishing emails copy an exchange's logo and style to trick you into entering your password or codes on a fake site. Scammers do not know your anti-phishing code, so they cannot put it in their emails.

How do I set it?

1. Open Security and find Anti-Phishing Code under Advanced Security.
2. Press Create (or Change if you already have one).
3. Enter a new code of 6 to 20 characters.
4. Confirm with a verification code and save.

Your current code is shown masked on the Security page, so people looking at your screen cannot read it.

Tips for a good code

• Pick something easy for you to recognise but not easy to guess.
• Do not use your password or any part of it.
• Never share it, and do not post screenshots of your emails that show it.

I got an email without my code

• Do not click any links or open attachments.
• Do not enter your password, codes or backup key anywhere it asks.
• Go to Xoibit by typing the address yourself and check your account from there.

The anti-phishing code protects emails only. Fake messages can also arrive by SMS, chat or social media. Xoibit staff will never ask for your password or verification codes.