You can easily purchase a physical security key online. Read this quick guide to learn more.

Safeguarding your account and the wealth entrusted to our care is a priority for us at Xapo Bank. We have put measures in place to secure your account, in view of the global rise in scams and fraud incidents.

All versions of Ledger are currently supported to secure your Xapo Bank Bitcoin withdrawals. Learn more below.

Your Anti-Phishing Email Code should remain confidential and must not be shared with anyone, including Xapo Bank’s support team.

Your hardware security key's OTP feature is attempting to send a code to your phone, but Xapo Bank does not use OTP. We only support FIDO U2F/FIDO2 authentication.

Source of Funds (SoF) checks are key for us to understand where your money is coming from when it arrives in your Xapo account.

Yes, you can change your Anti-Phishing Email Code at any time in the “Security & Privacy” settings under the “Anti-Phishing Code” section. We recommend changing your code periodically to maintain security, especially if you suspect it has been compromised

We have a duty to protect your Xapo Bank account from being targeted by fraudsters. One of the measures we use to protect your account is geolocation.

The United Kingdom Financial Conduct Authority (FCA) have changed the categorisation of cryptoassets so that they are now categorised as “Restricted Mass Market investments”. As a result of this we now have to display risk warnings prominently across our website and the Xapo Bank app.

Not exactly. Multisig uses multiple private keys to sign blockchain transactions while hardware security keys are used for multi-factor authentication and are not directly related to blockchain technology.

The Anti-Phishing Email Code is a security feature that helps protect your account from phishing attempts. Once you set up a unique code (up to 20 characters), it will be included in all legitimate emails and SMS messages from us.

You can set up your Anti-Phishing Email Code by going to the “Security & Privacy” settings in your account. Choose the “Anti-Phishing Code” section.

You can use your Ledger to secure your Xapo Bank Bitcoin withdrawals. Learn how below.

If you receive a message claiming to be from us without your Anti-Phishing Email Code, do not respond or click on any links. This could be a phishing attempt.

If you forget your Anti-Phishing Email Code, you can reset it in your account settings under the “Security & Privacy” section.

This can happen if your phone treats the hardware key as a generic NFC tag instead of triggering the intended action (e.g., FIDO2 authentication).

A safe-haven currency is one that maintains its value during economic instability. It is a good investment to park your wealth in, as you can be sure that it will keep the same purchasing power (or gain more) over time.

A hardware security key is a physical device used for two-factor authentication. It adds an extra layer of security by requiring physical confirmation to access accounts, protecting against hacking and phishing attacks.