Account protection
How an account is opened, how a session is held, and what has to be true before a withdrawal leaves the wallet.
For customer accounts and payouts. Updated 23 September 2026.
Registration, sign-in, and a password change each ask for more than the password. The password is stored so it cannot be shown back to you.
Sign-in asks you to confirm you are there before the password is tested.
Wrong passwords pause further attempts from that browser. Use a password you have not used anywhere else.
A new password, a reset, and a change from the account must include upper case, lower case, a number, and a symbol. A password that has already appeared in a public leak is refused.
A new account stays on the verification step until the email address is confirmed.
Each successful sign-in keeps a record of the device and an approximate location.
After a password is accepted, the browser holds the session. Changing the account, including a withdrawal, is tied to that session.
The site is served over HTTPS. The session is not sent on a plain connection.
Page scripts cannot read it, and it is not attached to forms on other websites.
Signing out closes the session. Opening the site again asks for the password.
You complete identity verification once. A withdrawal stays closed until that verification is finished.
A withdrawal cannot be started until the account is verified.
The form accepts a passport, a national ID, or a driver’s license, and it asks for the front and the back.
The check asks you to hold a neutral face and follow the poses on screen. A still photo is not the check.
Identity verification comes first. The withdrawal then asks for a code, and the amount still has to fit the wallet.
You can turn on a 6-digit code from an authenticator app. Turning it on or off asks for a live code. While it is on, a withdrawal asks for that code.
When the authenticator is off, the withdrawal sends a code to the email on the account. The code expires. A wrong or expired code stops the withdrawal.
The payout method has to be available for that coin, and the amount cannot be larger than the balance.
Credit limited to a specific use cannot be withdrawn.
Confirm the email, finish identity verification before a withdrawal, and keep a code on the account. The authenticator is the step you switch on.
