Account Security

How sign-in works

Signing in sends a one-time code to your email address. That makes your email inbox the key to your account — secure it with a strong, unique password and its own two-factor authentication.

We will never ask you for your sign-in code. Anyone who does is trying to take over your account.

Active sessions

Account Settings lists the devices currently signed in, with their approximate location and last activity. If you see something you do not recognise, revoke that session — or log out every other device at once — and contact support.

Payment Lock

Payment Lock adds an authenticator code requirement before withdrawals and purchases, without affecting normal sign-in. Enable it from settings if you hold a balance.

Recognising scams

• Requests to move the deal to another app or to pay directly.
• Anyone claiming to be staff and asking for codes, passwords or remote access.
• "Overpayment" stories asking you to refund the difference somewhere else.
• Links to sites that imitate our sign-in page — check the address bar.
• Pressure to release escrow before you have verified delivery.

If something looks wrong

Revoke unfamiliar sessions, secure your email account, and contact support straight away. If it concerns a specific order, keep the order chat intact — do not delete anything, as it is the evidence support relies on.