Protect your HedgerX account from phishing
Turn on Google Authenticator, set a fund password and an anti-phishing code, and check the sender and the web address before you click. HedgerX says it never asks for passwords, private keys or codes.
Reach the website only through official channels, and check the address character by character. HedgerX warns that fake sites copy its address with small differences.
Set up in this order
- Enable Google Authenticator. HedgerX asks for a code when you log in or withdraw. It also advises turning off account sync in the authenticator app.
- Set a fund password. Make it different from your login password so a hacker with access to your account still cannot move assets.
- Set an anti-phishing code. Do it in the Security Center. Every official email then shows your code.
- Protect your email. Use a unique, complex password on the email linked to HedgerX and turn on two-factor authentication there.
- Check the source before you click. Hover over a link to see where it goes. Download the app only from Google Play, the App Store or the official website.
Signs of a scam
- An urgent request to click a link or enter information now.
- A sender address or phone number that does not match HedgerX’s official contacts.
- Spelling and grammar mistakes.
- A link to an address that is not an official domain.
- Any request for passwords, private keys or verification codes. HedgerX says it will never ask for them by email or message.
Other habits HedgerX recommends
- Stay off public Wi-Fi when you trade, and use mobile data or a trusted network.
- Change your password from time to time and disable API permissions you do not use.
- Never share account details with strangers on social media, and ignore anyone who poses as HedgerX support.
Frequently asked questions
What do phishing attempts look like?
HedgerX lists fake emails and messages that claim your account is at risk, clone websites with a slightly different address, phone and SMS scams, and social-media contacts who offer investment advice or airdrops for an upfront fee.
What if I clicked a phishing link?
Change your password at once and enable two-factor authentication. Check the withdrawal history for transfers you did not make and contact support if you see any.
How do I disable my account if I suspect a break-in?
HedgerX says to go to the account security page and disable the account if you see a login from an unknown device, an unauthorised withdrawal request or other suspicious activity.
Does HedgerX send links by SMS?
In most cases no. Verify the source before you click anything.