HedgerX security: account protections and what is not yet publicly confirmed
HedgerX offers two-factor authentication, a fund password, an anti-phishing code and a 24-hour withdrawal lock after security changes. It also states a KYC and AML policy. Its claims about cold storage and licences are not yet confirmed.
Account protections you control
Google Authenticator
A code for login and withdrawals. Unbinding it locks withdrawals for 24 hours.
Fund password
A separate 6-digit PIN for sensitive actions.
Anti-phishing code
A personal code that appears in every official email.
Phone and email binding
Needed for withdrawals and notices. Unbinding an email blocks a new binding for 7 days.
24-hour withdrawal lock
Applies after you change security settings or reset 2FA.
Disable account
Lets you freeze your own account if you suspect a break-in.
KYC and AML policy
HedgerX states a risk-based approach, with periodic risk assessments across products, customers, transaction patterns and jurisdictions. Customer due diligence happens at onboarding. Politically exposed persons, high-risk jurisdictions and opaque corporate structures get enhanced due diligence, and automated and manual review keep monitoring accounts afterwards. HedgerX says it files suspicious transaction reports with the relevant authority without telling the customer, and that it may suspend accounts. It also states zero tolerance for money laundering, terrorist financing, sanctioned entities and high-risk jurisdictions.
Platform-side claims
HedgerX states that it holds 98% of assets in cold storage, runs a multi-tier system and monitors risk in real time. Its operator says it is registered as a Money Services Business with FinCEN under number 31000323612731. We have not yet confirmed the cold-storage figure, other licences, audits or reserves. Is HedgerX legit? has the claim-by-claim table.
Restrictions to know
- Services are not available in China, Turkey, Kazakhstan and Indonesia.
- HedgerX may restrict, freeze or close accounts it considers high risk, and states that it reports to authorities where required.
- Several security actions require identity verification, including a video, so keep your KYC documents at hand.
Frequently asked questions
Does HedgerX keep user assets in cold storage?
HedgerX's website says 98% of assets are in cold storage. No proof of reserves or third-party attestation is published for the figure yet.
What happens to withdrawals after a security change?
They are locked for 24 hours after a password, trading PIN, 2FA, email or phone change.
Does HedgerX follow AML rules?
It states a risk-based KYC and AML policy based on FATF recommendations, with due diligence, enhanced checks for high-risk customers, monitoring and suspicious-transaction reports to the relevant financial intelligence unit.