01
You begin from an address you typed or saved
We will never send you a sign-in link out of the blue. If one turns up unprompted, it did not come from us, whatever the sender line claims.
Good to have you back.
No account yet? This takes about a minute and opens on a practice balance.
Already have an account? Open the link in your welcome email, or type the address in by hand. Nothing else we send will ever be a way in.
Three things happen each time you log in, and knowing what they are makes it obvious when something is not right.
01
We will never send you a sign-in link out of the blue. If one turns up unprompted, it did not come from us, whatever the sender line claims.
02
Always, on every device, including one you used an hour ago. A page that takes your password and then lets you straight through is not ours.
03
Logging in does not authorise a withdrawal. That is confirmed on its own, when you request it, against an address you approved earlier.
The account is the product. All of this lives inside it, and none of it needs a separate tool bolted on the side.
Nine times in ten the device clock has drifted. Switch the phone to automatic time, wait for the next code, and try again. If it still fails, use a recovery code and re-enrol the app from inside the account.
Use one of the recovery codes you were given when you enrolled. Each works once. If those are gone too, contact support from the form — re-enrolment needs identity checks and is deliberately not instant.
Start the reset from the sign-in page. The link goes to the address on the account and expires quickly. Resetting a password never removes the second step, and never enables a withdrawal on its own.
Do not follow it. We do not send unprompted sign-in links or ask you to confirm a login by email. Open the site yourself, sign in as normal, and check the device history in your account.
Repeated failed second steps lock an account for a while, on purpose. Wait it out rather than retrying, then sign in cleanly. A lock that will not clear means the security team has placed a hold, and support can explain why.
Approve withdrawal addresses while nothing is happening, not while you are rushing to move funds. The small delay is the safety feature: someone with your password and your phone still cannot send anything to a new address.
Look over the device list in your account now and again. Anything you do not recognise is worth ending straight away, and it is a far easier conversation to have before the fact than after it.