What is considered unauthorised access to an account?

Unauthorised access occurs when someone gains entry to an account without the account holder's permission. This can happen through a variety of methods — including stolen or guessed login credentials, compromised e-mail accounts used for password recovery, social engineering tactics such as phishing, or exploitation of weak security settings — and it represents one of the most serious threats to account safety in the online trading environment.

Unauthorised access can take many forms, ranging from a single unauthorised login to more damaging scenarios where the intruder attempts to modify account settings, place trades, initiate withdrawals, or extract personal information. In some cases, the account holder may not immediately realise that unauthorised access has occurred, particularly if the intruder is careful to avoid making obvious changes. Warning signs that may indicate unauthorised access include unrecognised login notifications or activity in the account history, changes to account settings or personal details that the user did not initiate, unexpected orders or positions appearing in the trading account, and withdrawal requests that the account holder did not submit.

The consequences of unauthorised access can be significant, potentially including financial losses, exposure of personal and financial data, and the disruption of ongoing trading activity. This is why both the platform and the user share responsibility for preventing it. On the platform's side, protective measures include encrypted login connections, two-factor authentication support, automated anomaly detection, session management controls, and real-time monitoring for suspicious activity. On the user's side, the most effective defences include enabling two-factor authentication, using a strong, unique password that is not shared with any other service, being vigilant against phishing attempts that try to trick users into revealing their credentials, and avoiding accessing trading accounts from unsecured public networks or shared devices. If a user suspects that unauthorised access has occurred or has been attempted, they should immediately change their password, enable or verify their two-factor authentication settings, and contact the platform's support team to report the incident and request a security review of their account.