Skip to content

Staying Safe

People pretending to be a broker is an old trick, and it works because the fake usually looks close enough to the real thing. The best defence is knowing exactly where XBTFX lives and what we will and won’t ask you to do.

Our official addresses

Websites. XBTFX only operates at xbtfx.com. Everything of ours sits on that domain or a subdomain of it:

AddressWhat it is
xbtfx.comMain website
portal.xbtfx.comClient portal: your account, wallet, deposits and withdrawals
support.xbtfx.comThis help center
docs.xbtfx.comDeveloper documentation

A link that looks like ours but is spelt differently, adds a word (xbtfx-login.com, xbtfx.support), or uses another domain ending is not us.

Email. Our addresses end in @xbtfx.com. The ones you’re most likely to deal with:

Phone. +44 20 3807 9081, Monday to Friday, 14:00 to 22:00 GMT.

Social media.

NetworkAccount
Telegramt.me/xbtfx_official
X@XBTFOREX
YouTube@XBTFOREX
Facebookfacebook.com/XBTFX
Instagram@xbtfx
LinkedInXBTFX

Be wary of anyone who contacts you first claiming to be XBTFX support, particularly on Telegram or WhatsApp. If you’re not sure, ask us through the chat widget on this site or in the portal before you reply.

What we will never ask for

We will never ask for your password, and we will never contact you by SMS or phone to get it. Treat your two-factor codes and backup codes the same way: they’re for signing in, and nobody helping you needs them.

If someone asks, stop there. It doesn’t matter how much they know about your account or how urgent they make it sound.

Check before you send money

  • Crypto: only send to a deposit address you generated yourself in the portal. An address someone sends you in a chat or an email is not a deposit address.
  • Bank transfer: our bank details are shown in the portal under the SEPA method, with XBTFX LLC as the beneficiary. Don’t pay into an account given to you any other way.
  • “Fees to release your withdrawal”: withdrawals come out of your own balance. Being told to pay something first, to anyone, is how this kind of scam usually ends.

Lock down your login

  • Two-factor authentication. With it on, signing in asks for a six-digit code from your authenticator app as well as your password. Keep your backup codes somewhere safe and offline: they’re how you get in when the app isn’t available. If you’ve lost both, contact support through the chat widget.
  • Passkeys. The portal also lets you sign in with a passkey, which can’t be phished the way a password can. See How to Register.
  • Withdrawal whitelist. Turn on Approved addresses only and crypto withdrawals can only go to addresses you’ve saved. Someone who gets into your account still can’t send your money elsewhere. See Withdrawals.
  • Sign in from the address bar. Type portal.xbtfx.com or use a bookmark instead of following a link in an email.

If something feels off

Tell us. Open the chat widget, or email support@xbtfx.com, with whatever you were sent: the link, the email address, the account that messaged you. If you think someone has got into your account, say so first and change your password straight away.

Was this page helpful?