Reviewed guide | 2026-10-18
Checking the inbox behind your exchange login for forwarding rules and hidden filters
Attackers who reach your email often add a quiet forwarding rule or filter rather than changing the password. Here is how to inspect the mailbox linked to Binance, OKX, Bybit or Bitget and remove anything you did not set.
Multiple exchanges | Singapore | SGD | fees, access and account safety
Exchange security settings get plenty of attention, but the email account behind them often gets none. That inbox receives login codes, withdrawal confirmations and security alerts, which makes it a prime target. A careful attacker who gets in does not lock you out; they add a rule that forwards exchange emails elsewhere, or a filter that deletes alerts before you see them, and then wait. You keep using the inbox normally and notice nothing. Checking for these changes takes about fifteen minutes and is worth doing twice a year.
Look at forwarding settings first
Open your email provider's settings on a computer, since mobile apps often hide these options. Find the forwarding section and check whether any address is listed. If you did not add it, remove it immediately and note the address. Some providers also offer forwarding through connected apps or account linking; look for any linked accounts or delegates who can read your mail, and remove those you do not recognise.
Review filters and rules
Next, open the filters or rules section. Look for anything that mentions exchange names, words such as withdrawal, security or verification, or that sends messages straight to trash, archive or a folder you never open. A legitimate filter you set years ago might still be fine, but any rule you do not remember creating should be deleted. Afterwards, search your trash and archive for recent exchange emails to see whether anything was hidden from you.
Check sessions, app passwords and recovery details
Most providers list active sessions and devices with locations. Sign out everything you do not recognise. Review app passwords or connected third-party apps, which can keep access even after a password change, and revoke old ones. Confirm that the recovery phone and backup email belong to you. Then change the mailbox password, save it in your password manager and make sure two-step verification uses an authenticator or passkey rather than SMS alone.
Tie it back to the exchanges
If you found anything suspicious, log in to each exchange from its app and review the device list, withdrawal address book and API keys for changes. Set or confirm the anti-phishing code so genuine emails are easy to tell apart. Consider using a dedicated email address only for exchange accounts, one that never appears on shopping sites or newsletters, which makes it harder for attackers to find and target in the first place.
Risk boundary: Singapore Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Check the mailbox forwarding section on a computer and remove unknown addresses.
- Delete filters that hide or redirect exchange emails, then search trash and archive.
- Sign out unknown sessions and revoke old app passwords or connected apps.
- Confirm recovery details, change the mailbox password and use an authenticator or passkey.
- Review each exchange's devices, address book and API keys if anything looked wrong.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.