Multi-factor authentication
An additional verification step for sign-in and selected sensitive account actions.
09 Security
Security you
can understand.
Layered account controls, visible security activity and a direct sequence to follow when something does not look right.
01 Layered protection
Different controls. One purpose.
No measure can eliminate every threat. The security model is designed to reduce avoidable risk, surface unusual activity and make protective actions clear.
Device verification
New or unusual device activity may trigger additional checks and account alerts.
Suspicious activity
Important access and setting changes may be monitored or temporarily restricted.
Withdrawal verification
Sensitive transfers may require additional verification or a temporary security hold.
02 Information & API
Protect data according to its sensitivity.
Access should be limited to authorized people and systems with a defined need.
- Encrypted connections for information in transit
- Protected storage and appropriate access controls
- Security-event and account-activity history
- Separate read, trade and withdrawal API permissions
- Regular review of devices, sessions and API keys
03 Critical rule
Never share recovery secrets.
Belvoraine support will never ask for a private key or seed phrase to verify or recover an account.
- Wallet private key or recovery phrase
- Password or authentication code
- API secret
- Remote access to your device
- Funds sent to a “safe” wallet
04 Suspected compromise
Act quickly. Use a clear sequence.
- 01
Secure the account
Change the password and complete any additional verification presented by the platform.
- 02
Review active access
Inspect sessions, recognized devices and API connections. Disable anything unfamiliar.
- 03
Limit suspicious activity
Where available, pause trading, API functions or withdrawals during review.
- 04
Contact security
Use an official channel and include context—but never credentials or recovery secrets.
Security does not remove investment risk.
Account controls reduce risks associated with unauthorized access and misuse. They do not eliminate market, liquidity, custody, counterparty, regulatory or technology risk.
Something looks unusual?
Prioritize the account, record the relevant details and reach the security team through an official channel.