Security
Email, PIN, Face ID, the withdrawal address allow-list, and limits.
How the app keeps your funds safe
The app is a custodial wallet: it holds your crypto for you. There is no KYC — you never upload an ID, a selfie, or a proof of address. Instead of identity documents, your funds are protected by server-side controls that make a stolen session hard to cash out.
Your backup email
A backup email is optional. The app never requires one to deposit, send, or withdraw — you add it for exactly one reason: it's how you reset a forgotten PIN.
Your account PIN
Your PIN is a 4–8 digit code you type to confirm a withdrawal to a new address — one you haven't withdrawn to before. Once an address is confirmed, it's trusted for future withdrawals, so you won't be asked again for it.
Changing or resetting your PIN
To change your PIN you enter the current one. If you've forgotten it, you reset it with a code emailed to your backup email. Both live under Security → Withdrawal PIN.
Using Face ID and biometrics
Face ID (or your device's fingerprint) is a faster alternative to typing your PIN when you confirm a withdrawal to a new address. It uses your device's Telegram biometrics, so the check happens on your phone.
The withdrawal address allow-list
The address allow-list is an anti-theft control for withdrawals. When it's on, the app will only send withdrawals to addresses you have explicitly saved and enabled — so even if someone gained access to your session, they couldn't withdraw to an address you didn't approve.
Withdrawal limits and AML screening
Every account has withdrawal limits: a per-transaction maximum and a daily maximum, applied per asset. They exist to cap how much a compromised session could move before you notice.
What are critical security messages?
Whenever something changes that could let someone move your money, the bot sends you a Telegram message about it. These are critical messages: unlike ordinary payment alerts, they arrive even if you've turned Telegram notifications off in Settings. You cannot mute them, and that's deliberate.
Staying safe from scams
Most stolen crypto is handed over by the victim, not "hacked." This is the official safety guidance for the app. Read it once, and it'll keep you ahead of the common scams.