Reviewed guide | 2026-10-09
The first hour after spotting unauthorised changes on your exchange account
An unfamiliar login, a changed email or a new withdrawal address demands quick and orderly action. A first-hour response plan for readers in Turkey using Binance, OKX, Bybit or Bitget.
Multiple exchanges | Turkey | TRY | fees, access and account safety
You open the app and something is wrong: an alert about a login from a city you have never visited, a withdrawal address you did not add, or a notice that your email was changed. Panic tends to produce either paralysis or random clicking. Neither helps. The first hour matters most, because an attacker who has some access may be trying to get more. This guide gives a short ordered plan for that hour, aimed at users of the large exchanges. It relies on each platform's own security features and official support, never on outside helpers.
Lock the account down first
Most large exchanges offer a way to freeze or disable your account quickly from the security settings or through the help centre. If you cannot be sure who has access, use it. Freezing stops trading and withdrawals while you investigate. If you still control the account, end all active sessions except the one you are using and change the password to a new, unique one. Do this from a device you trust, not from a phone or computer you suspect may be compromised.
Secure the email and phone behind the account
Attackers often reach an exchange account through the linked email. Sign in to your email provider, change its password, check for forwarding rules or filters you did not create, and review its list of signed-in devices. If your phone number may have been moved to another SIM, contact your mobile operator immediately. Until the email and phone are secure, any recovery on the exchange side can be undone again.
Contact official support with clear facts
Open a support request from inside the official app or help centre. Describe what you saw, when you noticed it, which settings changed and whether any funds moved. Include transaction identifiers if there were withdrawals. Keep your message factual and short. Support will never ask for your password or verification codes. Ignore anyone who contacts you on social media offering to recover the account or funds; these are almost always scams.
Rebuild settings once access is restored
When the account is back under your control, review everything: two-step verification methods, passkeys, the withdrawal address book, API keys, sub-accounts and linked devices. Remove anything you did not create. Set up an authenticator or passkey rather than SMS, enable a withdrawal allowlist if available and turn on an anti-phishing code. Write a short note of what happened, as it helps you spot the weak point and close it for good.
Risk boundary: Turkey Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Freeze the account from security settings if you cannot be sure who currently has access.
- Change the email password and remove forwarding rules you did not create yourself.
- Contact your mobile operator at once if the phone number may have been moved.
- Open a support request only from the official app with times and transaction details.
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat.