Digital finance has opened up new and exciting opportunities – but it's also created new spaces for criminals to exploit. From phishing emails to voice impersonation, scammers are getting increasingly sophisticated. That’s why your security is our top priority at Xapo Bank – and it’s why we’re sharing simple, effective ways you can protect yourself every day.
Data from 2024
1. Know the red flags of a scam
Scams can come in many forms. But most share common warning signs:
You’re asked to take urgent action
You’re offered help recovering lost Bitcoin or accessing “hidden” funds – these are common scams that target Xapo accounts
The message comes from someone claiming to be a Xapo representative, but the email address doesn’t end in “xapo.com”
You're asked to “verify” your account by moving funds or providing sensitive information
You’re told to download a third-party app or give someone remote access to your device
The sender urges you to keep things secret or avoid speaking to anyone else
If something feels off, it probably is.
2. Never share sensitive information
Xapo Bank will never:
Ask for your account PIN or 2FA or any other credentials outside of Xapo, including passwords and seed phrases for any service you may have.
Request remote access to your phone or laptop
Pressure you into making an investment decision
Ask you to install third-party apps for “security purposes”
If someone asks for this kind of information, stop and contact us immediately through the emails provided on our website or through in-app chat
3. Set up your Anti-Phishing Code
This is a simple but powerful tool. Your Anti-Phishing Code is a secret word or phrase that you choose, and it will appear in all official emails and messages from Xapo. If an email claiming to be from Xapo is missing the code or shows the wrong one, it could be a scam.
You can set this up in your account under Security & Privacy > Anti-Phishing Code.
4. Use two-factor authentication (2FA)
Enable 2FA on your Xapo Bank account and wherever else you store personal or financial information. Better yet, consider using a hardware security key. Physical security keys are more resistant to phishing and remote attacks.
5. Watch for fake apps and websites
Scammers often create fake apps or spoofed websites that look nearly identical to the real thing. Only download the Xapo Bank app from official app stores, and our official websites are:
xapobank.com
xapo.com
Always make sure the website has a green padlock in the browser’s address bar and that the domain is correct (e.g. https://xapobank.com). If both are in place, the site should be safe. Never scan a QR code from an untrusted source.
6. Keep your devices and apps updated
Install updates regularly to protect your phone and computer from known vulnerabilities.
7. Verify before you act
If you’re contacted by someone claiming to be from Xapo Bank, verify the communication through official channels:
Secure in-app chat
Email: [email protected]
Never respond to messages from unofficial email domains (e.g., anything not ending in @xapo.com, @support.xapo.com, or @mail.xapo.com).
8. Be alert to social engineering
Scammers may impersonate someone you trust – a friend, colleague, or even a recruiter – to get you to share information or send money. They may also spoof phone numbers, social media profiles, or use AI-generated voice technology.
To help you verify if a call is genuinely from us, we have a secure on-call verification system. When Xapo Bank contacts you by phone, a unique verification code will appear in your app. You can ask the caller to provide this code – if it doesn’t match, hang up immediately.
9. Know what to do if something feels wrong
If you think you may have fallen for a scam:
Stop communication immediately
Change your passwords and PINs
Contact Xapo Bank through the app or at [email protected]
With our card IVR service, you can freeze your card, report it as lost or stolen, or report issues with transactions. Get in touch with our IVR number at +350 200 77714.
At Xapo Bank, we’re here to help you stay safe. We invest in world-class security infrastructure and compliance protocols so you can bank confidently. But the best defence against fraud starts with you – staying informed, alert, and proactive.
