Core Protections
- Hardware or app-based 2FA – Prefer authenticator apps or security keys over SMS.
- Withdrawal address whitelist – Enable and require time-locks for changes.
- Anti-phishing code – Set a unique code that appears in official emails.
- API key restrictions – Disable trading/withdrawal permissions when not needed; IP-restrict keys.
- Device and session review – Periodically check active sessions and revoke unknown devices.
If Your Account Is Locked
Gather government ID, proof of address, and any historical deposit or login records. Open a ticket through the official support portal (bookmark it in advance). Avoid sharing documents over unsolicited chat links. Sleutheon can help structure the evidence package for complex cases.
If Unauthorized Withdrawals Occurred
- Change passwords and revoke 2FA / API keys immediately from a clean device.
- Report to the exchange with transaction IDs and timestamps.
- Preserve all emails and screenshots.
- Consider on-chain tracing if funds moved to external addresses.