Belvoraine Digital assets, made clearer.

Contact us ↗

06 Security & account protection

Security you can see.

Security centred on visibility, control and decisive action — helping you understand activity, manage access and respond when something appears wrong.

Layered protection

Multiple controls.
One clear purpose.

No security measure can eliminate every risk. Our approach was built to reduce avoidable risks, identify unusual activity early and give you clear steps to protect your account.

01 / Access

Multi-factor authentication

MFA introduces another verification step for sign-ins and chosen sensitive actions. Belvoraine supports both authenticator applications and security verification codes.

If you lose access to your authentication method, recovery might require identity verification and additional security checks.
02 / Devices

Device verification

Sign-in and device activity is monitored for unusual or unauthorized access. Activity from a new device can trigger an email or push notification.

If you do not recognize a sign-in, secure your account immediately and contact us through an official channel.
03 / Monitoring

Alerts & suspicious activity

Alerts can cover new sign-ins, unrecognized devices, important setting changes or events requiring extra verification. Unusual activity can result in temporary restrictions.

Monitoring can identify potential threats, although it cannot ensure that every unauthorized action is detected or stopped.
04 / Transfers

Withdrawal verification

Withdrawals and other sensitive actions can require further verification. Some withdrawals might be held temporarily while security checks take place.

These controls create additional time to spot potentially unauthorized activity and safeguard the account.

Protecting your information

Specific controls,
not broad claims.

Protection is matched to the nature and sensitivity of the information, while access is limited to authorized people and systems with a defined business need.

In transit

Encrypted connections

Data moving between your device and Belvoraine systems uses encrypted connections and current, industry-standard transport security.

At rest

Protected storage

Systems supporting the service protect stored personal and sensitive data with encryption at rest and suitable access controls.

Audit history

Security activity remains visible

Records can include account sign-ins, device events, authentication, API connections, changes to account or strategy settings and security verification events.

API access & permissions

Only grant the access an API key needs.

Examine active API access regularly. If a key is used only for market data or trading, withdrawal permissions can remain disabled to limit the impact of a compromised credential.

01Read

Access the account, market and activity information that the permission allows.

02Trade

Create and manage only the trading activity allowed by the configuration.

03Withdrawal

Start a withdrawal only when that permission has been expressly enabled.

Critical security rule

We will never ask for your recovery secrets.

Belvoraine support never requests a seed phrase or private key when verifying or recovering an account.

Never share

  • Wallet private key
  • Seed or recovery phrase
  • Password
  • MFA or authentication codes
  • API secret
  • Account credentials
  • Remote access to your device

Watch for messages that

  • Create a sense of urgency
  • Ask you to move funds to another wallet
  • Request your password or MFA code
  • Ask you to install remote-access software
  • Promise guaranteed returns
  • Direct you to an unfamiliar website

Unsure whether a message is legitimate? Never click its links or reply. Visit the official Belvoraine website directly and contact support through the channels on our Contact Us page.

If you suspect unauthorized access

Act quickly.
Follow a clear sequence.

If you see a login, device, API connection, trade, withdrawal or other activity you do not recognize, take these steps.

  1. 01

    Secure your account

    Update your password and finish any further security checks requested by the platform.

  2. 02

    Examine active access

    Check recognized devices, active sessions and API connections. Remove or disable anything you do not recognize.

  3. 03

    Stop suspicious activity

    Where the controls are available, pause trading, API access or withdrawals until the account review is complete.

  4. 04

    Contact Belvoraine

    Email [email protected] or use the available channels on our Contact Us page.

  5. 05

    Follow the security review

    We might ask for identity verification or details about the activity. Selected restrictions can stay in place during the incident review.

Account recovery

Verification protects the legitimate account holder.

Recovery might require identity verification, confirmation of account information, verification through an established channel, a review of recent activity and further security checks.

Losing access to a usual authentication method does not allow support to bypass security verification. Certain functions can remain restricted temporarily.

Report an incident

Include context, never secrets.

Where appropriate, provide the account email, approximate time, device, relevant transaction details and screenshots.

Never includeYour password, MFA codes, private keys or seed phrase.
Contact security support
What happens after a report

We may verify your identity, examine account activity, restrict selected functions, investigate suspicious transactions or connections, escalate the matter to the security or compliance team and communicate next steps through an official channel. Response times vary with the nature and severity of the incident.

Shared responsibility

Your role in keeping your account secure.

Platform controls are most effective when paired with careful account habits. Secure private keys and recovery phrases and never disclose them to anyone.

01

Use a unique, strong password and keep MFA enabled.

02

Regularly update your operating system, browser and security software.

03

Avoid signing in from shared or untrusted devices.

04

Examine account alerts, connected devices and active API keys regularly.

05

Grant API keys only the permissions they require.

06

Check the website address before every sign-in, and stay away from unexpected links.

07

Keep credentials, authentication codes and recovery information private at all times.

08

Reach support without delay whenever something looks unusual.

A clear approach to security

Controls that work together.

MFA / 2FA

An extra verification layer for access and sensitive actions.

Device verification

Checks and alerts for new or unrecognized devices.

Fraud monitoring

Ongoing checks for indicators of fraud or unauthorized use.

Withdrawal controls

Further checks and, where appropriate, temporary holds.

Account alerts

Alerts covering significant sign-ins and security-related events.

Phishing guidance

Practical help identifying fraudulent messages.

Incident support

A defined process for reporting account compromise.

API permissions

Granular controls that limit what a key can do.

As products, systems and the threat landscape develop, security measures can evolve as well.

Important distinction

Security cannot remove investment risk.

Security controls are intended to reduce risks from unauthorized access, fraud and misuse. They do not eliminate market, technology, liquidity, custody, counterparty or other risks associated with digital assets. Crypto assets can be highly volatile, and you may lose some or all of an investment.

No security feature, monitoring system or authentication method can guarantee that an account will never be compromised or that a transaction can always be reversed. Examine the applicable product terms, risk disclosures and regulatory information before using Belvoraine.

Next step

Questions about Belvoraine?

Let us know what you need to understand, and we will direct you to the appropriate next step.

Contact the team ↗