Trading realityUpdated 3 min readBy the FXNOD team
Trading account hacked: what to do right now
If your trading account has been hacked, act in this order: secure the email account linked to it, change the trading account's password, revoke every connected app and API token, contact the broker's official support to freeze withdrawals, and tell your bank or card provider. Then find out how they got in, or it will happen again.
The first hour
Secure your email first
Change its password and turn on two-factor authentication. Whoever controls the email can reset everything else.
Change the trading account password
From a device you trust, to one used nowhere else.
Sign out all other sessions
Where the broker offers it.
Revoke connected apps and API tokens
Remove everything, then add back only what you use.
Contact the broker through its official site
Ask them to freeze withdrawals and note unauthorised activity.
Tell your bank or card provider
If payment details may be exposed or money has moved.
What to record
- Each trade, transfer or withdrawal you did not make, with times.
- Login history, if the broker shows it.
- Any messages, emails or links that preceded the incident.
- The reference number of your report to the broker.
How accounts are usually taken
| Method | How it looks |
|---|---|
| Phishing | A fake login page reached from an advert, email or message |
| Fake support | Someone posing as the broker asks for your password or a code |
| Shared credentials | A login given to an account manager or a bot seller |
| A leaked API token | A token with broad permissions pasted into a tool or a chat |
| Malware | A fake trading app, cracked software or a browser extension |
| Password reuse | The same password leaked from another site |
| SIM swap | Your phone number is moved to another SIM to intercept codes |
Find the cause
Scan your devices, remove unfamiliar apps and extensions, and think back over what you clicked or installed and whom you gave access to. Changing a password on an infected device hands the new one to the same person.
Preventing the next one
- A unique password for every account, kept in a password manager.
- Two-factor authentication with an app, not text messages, wherever offered.
- Type the broker's address yourself. Never sign in from a link.
- Give trading tools the minimum permissions, and never your password.
- Install apps only from official stores.
Beware the second scam
After a loss you may be contacted by people offering to recover your funds for a fee. They are usually the same criminals or others like them. Real recovery goes through the broker, your bank and the police.
If the account is connected to FXNOD
FXNOD never holds your Deriv password. Disconnect the Deriv login in Connected Accounts, and remove FXNOD from the connected apps in your Deriv settings: either cuts the access and stops bots on that login. Change your FXNOD password too, and reconnect only once the Deriv account is secure.
Questions people ask
- Can I get my money back after a trading account hack?
- Sometimes. Report it to the broker and your bank immediately. Speed makes a real difference.
- How do I know if my trading account was hacked?
- Trades or withdrawals you did not make, login alerts from unknown places, or a password that no longer works.
- Does two-factor authentication stop hacks?
- It blocks most password theft. It does not protect you if you hand over the code or approve a malicious app.
Learn the mechanics at no cost
FXNOD tools require a package, with any temporary $0 offer clearly marked in Discover. Use your Deriv demo account to practise with virtual funds before trading real money.
Get started