Secure the recovery chain first
An exchange password can be strong while its recovery email remains exposed. Review email sessions, recovery methods and sign-in alerts before changing the exchange account. Type or use a saved official address instead of signing in through an advert, private message or look-alike domain.
Keep security layers independent
| Layer | Check now | Never disclose |
|---|---|---|
| Sessions and recovery methods | Password | |
| Authenticator | Transfer or recovery procedure | Setup secret and one-time code |
| Mobile SIM | Control of the registered number | OTP sent during a call |
| Self-custody wallet | Official app and recovery plan | Seed phrase or private key |
A SIM replacement does not automatically transfer an authenticator app. Read each provider’s current procedure and keep the old device until access tests are complete where possible.
Stop when the request does not match your action
- A page asks for a code when you did not start a sign-in.
- A caller asks for an OTP or remote screen control.
- A support account sends a new payment address in chat.
- A “recovery service” asks for the seed phrase.
A browser padlock only describes the encrypted connection to the domain you opened. Compare the complete domain and open support from the official application or site.
Prepare a non-secret recovery record
- List the services and their official sign-in pages.
- Record which recovery methods exist, without recording their values.
- Test email access and the provider-approved authenticator move.
- Write the result with PKT and close sessions you no longer need.
Should CNIC images go into a public support group? No. Verify the official secure channel and the exact request. Does 2FA prevent every takeover? No; phishing and malicious signing requests still require judgement.
Referral codes
- OKX — referral code VIP20FEE: OKX sign-up page
- Binance — referral code PKVIP20: Binance sign-up page
Disclosure: this page contains affiliate links.
Sources and review method
Google Account: two-step verification. The checklist and examples are editorial teaching material by Mr. Slash; figures are hypothetical unless a source and date are stated.
Continue the Pakistan guide
Related guides
Account freeze & recovery
Platform, fee and regulatory details can change. Recheck the official source before acting.
Tool and next step · Compare PKR total cost →
