What to do if your account is compromised
Speed matters. Work through these in order.
- Change your password — from a device you trust.
- Sign out all sessions — Profile → Security → Devices → Sign out all.
- Check your 2FA — if you cannot generate valid codes, an attacker may have re-registered it.
- Check whitelisted addresses — remove anything you did not add.
- Contact support immediately — they can freeze withdrawals while it is investigated.
- Secure your email — change that password too. Email is usually the first thing compromised.
- Scan your devices for malware, particularly clipboard hijackers.
What we can and cannot do
We can freeze the account, stop pending withdrawals and investigate. We cannot reverse a completed blockchain transaction. Nobody can. This is why acting within minutes matters.
Was this article helpful?
