Which exchange security alerts to switch on, and what to do when one arrives unexpectedly

Strong passwords and two-factor authentication make an account hard to break into, but they do not tell you when someone tries. Security notifications fill that gap. A login alert from a device you do not recognise, a message about a new withdrawal address or an email about a changed setting can give you minutes or hours to act before damage is done. Many users leave these alerts at their default settings or send them to an email address they rarely check. This guide explains which notifications are most useful on Binance, OKX, Bybit or Bitget, how to route them to a channel you watch, how to tell genuine alerts from phishing that imitates them and what to do the moment an unexpected alert appears.

Choose the alerts that matter most

Prioritise notifications for new logins or devices, password and two-factor changes, new withdrawal addresses and completed withdrawals. These events are the ones attackers must trigger to take control of an account or move funds. Enable them in the security or notification settings of each exchange. The official help pages describe the available options and where they are configured.

Send alerts somewhere you actually look

Push notifications from the official app reach you fastest, but email remains a useful record. Make sure the email linked to your account is one you check daily and that it is protected by its own strong password and two-factor authentication. If attackers control that email, they may be able to suppress or delete alerts. Avoid forwarding exchange emails automatically to other accounts.

Tell genuine alerts from imitations

Phishing emails often copy security alerts to make you click. Set an anti-phishing code where offered so genuine emails include your chosen phrase. When an alert arrives, do not use links inside it. Instead, open the official app or your saved bookmark and check the security log or notifications there. If the event appears in your account, it is genuine; if not, the email may be fake.

Act immediately on an unexpected alert

If an alert describes something you did not do, change your password from the official app, reset two-factor settings, sign out all sessions and remove unfamiliar devices, withdrawal addresses and API keys. Then contact support through the in-app channel with the time of the alert. Prepare this plan in advance and keep it written down, so that you can follow it calmly rather than improvising under pressure.

Risk boundary: Singapore Crypto Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint

• Enable alerts for new logins, security setting changes, new addresses and withdrawals.
• Link the account to an email you check daily and protect with two-factor authentication.
• Set an anti-phishing code so genuine exchange emails can be recognised.
• Verify any alert inside the official app rather than through links in the message.
• Keep a written response plan for alerts describing activity you did not perform.