If you suspect unauthorized access
Act quickly.
Follow a clear sequence.
If you see a login, device, API connection, trade, withdrawal or other activity you do not recognize, take these steps.
- 01
Secure your account
Update your password and finish any further security checks requested by the platform.
- 02
Examine active access
Check recognized devices, active sessions and API connections. Remove or disable anything you do not recognize.
- 03
Stop suspicious activity
Where the controls are available, pause trading, API access or withdrawals until the account review is complete.
- 04
- 05
Follow the security review
We might ask for identity verification or details about the activity. Selected restrictions can stay in place during the incident review.
Account recovery
Verification protects the legitimate account holder.
Recovery might require identity verification, confirmation of account information, verification through an established channel, a review of recent activity and further security checks.
Losing access to a usual authentication method does not allow support to bypass security verification. Certain functions can remain restricted temporarily.
Report an incident
Include context, never secrets.
Where appropriate, provide the account email, approximate time, device, relevant transaction details and screenshots.
Never includeYour password, MFA codes, private keys or seed phrase.
Contact security support ↗
What happens after a reportWe may verify your identity, examine account activity, restrict selected functions, investigate suspicious transactions or connections, escalate the matter to the security or compliance team and communicate next steps through an official channel. Response times vary with the nature and severity of the incident.