How we protect your account and withdrawals, and how to avoid scams

Last updated: 2026-10-15

What protects your account

• Passwords are stored only as secure hashes.
• Two-factor authentication, device verification and login 2FA (see Security settings).
• A verification code for every withdrawal and for every change to addresses, passwords, email, phone and API keys.
• Withdrawal limits per coin and per day, linked to your verification level, and reviews by our team for some withdrawals.
• An activity log of logins and security events, and device management.

Avoid phishing

• Always check the website address before you log in. Bookmark it.
• Set an anti-phishing code: our emails show it.
• We never ask for your password, 2FA codes or API secret, by email, chat or phone.
• Never install remote-access apps because someone asked you to.

Safe P2P trading

• Release crypto only after the money is in your account.
• Keep all communication in the order chat.
• Open a dispute instead of agreeing to anything outside the platform.

If you think your account is at risk, change your password, log out other devices and disable your account from Security, then contact support.