Account security: phishing, 2FA, and withdrawals
How to spot fake support and phishing sites, and how to set an authenticator and an anti-phishing code.
1. Two-factor authentication is the baseline
An email and a password are not enough. If that password leaks from another site, it can be reused against this account.
Turn on a time-based code from an app such as Google Authenticator. A stolen password alone should not be enough to sign in or withdraw. You still have to protect the phone and the backup codes.
2. Search ads and fake support chats
Attackers buy ads that look like the official site and collect passwords. Check the address bar. The primary site is https://www.bitflyer-pro.com.
bitFlyer support does not ask for your password, SMS code, or a transfer to a “verification account” in Telegram, Discord, WeChat, or email. A private message that asks you to send funds is a scam.
3. Anti-phishing code and a withdrawal allowlist
After you set a code of 4–20 characters, official mail from bitFlyer includes it. Mail without your code should be treated as fake.
Takeaways
- 1Turn on an authenticator and keep the setup key offline, written down, not in a screenshot.
- 2Use only https://www.bitflyer-pro.com. Do not follow links in unexpected email.
- 3Staff will not ask for your password or for a private transfer.
Check it against live markets
Use live markets to review what you read. Fills and fees follow the order you actually place.