I think my account was compromised

You see activity on your CoinUnited.io account that you did not do, or you think someone else has your login details.

What to do first

  1. Change your login password right away

    Go to the CoinUnited.io login page and click “Forgot password?”. Enter the email address or phone number you registered with, and enter the 6-digit verification code sent to your email or phone. Create a new password that you do not use anywhere else, and finish the extra verification if asked. After you change your password, you cannot withdraw for 24 hours. This is a security step.

  2. Contact support right away

    Do not wait to see whether the activity stops. If someone steals your funds, it may be hard for CoinUnited.io to recover them. Use the support chat button on this page and choose Contact support. If you cannot log in, enter your registered email or phone number in the form.

  3. Check your history for activity you did not do

    Open [History] > [Withdrawal] and [History] > [Deposit]. Look for withdrawals you did not make and copy the TXID of each one. In the Orders and Positions panel, check Order History and Trade History for trades you did not place. Check your inbox for emails from CoinUnited.io that you did not expect.

  4. Check your security settings

    Open the Security section of your account and look at Email Authentication, Phone Authentication and Google Authenticator. Turn on Google Authenticator if it is off. If you cannot receive codes on your email or phone, or you lost your Google Authenticator, click “Didn’t receive the code?” on the verification screen. Then use “Reset Security Settings”.

  5. Check your device and your email account

    Run an antivirus scan and remove browser extensions that you do not know. Keep your phone and email accounts secure. Log in only from the official website, coinunited.io.

If you cannot log in

See the article “I cannot log in to my account”. If your codes go to an email or phone that you no longer control, use “Reset Security Settings”. Contact support at once and use the registered email or phone number field in the form.

If you see a withdrawal that you did not make

Contact support at once with the TXID, the coin, the amount and the time. Once a withdrawal is confirmed on the blockchain, CoinUnited.io cannot reverse it. Blockchain transactions are irreversible and anonymous, so it is unlikely that CoinUnited.io can recover the funds.

  • Report the incident to law enforcement. This is the best action to take.
  • Law enforcement and experienced blockchain investigators can look into the theft further.
  • CoinUnited.io tries to keep you informed of investigation updates. Legal limits can restrict what it can share.
  • See How to Report Scams?

If someone asked you for your password, a code or coins

CoinUnited never asks for your password, 2FA code or recovery phrase. CoinUnited Support never asks you to send money or coins to any address, for any reason. Do not reply, and do not send anything more.

  • If you shared your password or a code, do the first two steps above now.
  • If you sent funds, contact support with the TXID and report it to law enforcement. See How to Report Scams?
  • Scammers often pose as CoinUnited.io accounts on X. The official X account is @realCoinUnited.
  • See How to Identify URL Spoof Phishing?

If you entered your login details on a website you now doubt

Change your password right away (step 1). Check that the address of the site you log in on is coinunited.io.

If the address you paste is different from the one you copied

Your device might be infected by malware that changes copied text. Install and run antivirus software and scan your system. Remove unfamiliar browser extensions and software. If you are not sure what to do, ask an information security expert.

If you see nothing unusual but you feel unsure

Still do steps 1, 4 and 5. Use a unique email address and password, turn on Google Authenticator, and do not click links or open attachments from unknown senders.

When to contact support

Contact support in all of these cases:

  • You see a withdrawal, transfer or trade that you did not make.
  • You shared your password or a verification code with someone.
  • You cannot log in and you did not change your password or security settings.
  • You see any other activity on your account that you do not recognize.

Send what you saw, the times, and the TXID of each withdrawal you did not make. Never send your password or any verification code.

Still need help?

Use the support chat button on this page and choose Contact support. Describe what happened and add the times if you know them. If you cannot log in, enter your registered email or phone number (with the country code) in the form. You will finish a quick security check after you send.

Our reply comes by email. If you cannot find it, check your spam folder.