Security

No, you do not need to verify your Deriv account unless prompted. If your account requires verification, we will contact you via email to initiate the process and provide you with clear instructions on how to submit your documents.

We may decline your verification documents if they are insufficiently clear, invalid, expired, or have cropped edges.

Please contact us via live chat immediately, and we'll help to disable 2FA on your account. When you have a new phone, please re-enable 2FA.

‍

An impersonator’s main goal is to steal your sensitive information and funds.

Here are some ways to identify impersonators of Deriv customer support:
- Impersonators ask for your login details or other sensitive information via Telegram.
- They provide rewards that sound too good to be true.
- They demand payments via untraceable channels, for example, via cryptocurrency.
- They ask you to download an app that isn’t offered on Google Play Store or Apple App Store.
- They ask you to download software that enables your device to be controlled remotely.
- They ask you to download files containing malware or virus that can infect your device.
‍

Of course, this list isn’t complete. Every day, impersonators come up with new ways to try to steal your information and money.

‍

• Do not share your account information and other personal details with anyone via Telegram.
• If something sounds too good to be true, don’t trust it.
• Never download apps via Telegram.
• Run all files through an up-to-date antivirus first before downloading.
• Please ensure to join the correct Deriv group on Telegram.
• If you have been contacted by a potential impersonator or if you have any questions, contact us via live chat.
  ‍

Examples of messages from impersonators:

Here are some ways to identify emails from impersonators:

• The email is poorly written, has incorrect grammar, and has many typos.
• Impersonators ask you to send confidential information over an unsecure platform, for example, via SMS, WhatsApp, email, etc.
• They ask you to fill out a form on an unsecure website without an HTTPS (secured) connection.
• They ask you to download unsecure mobile apps in the form of APK files that aren’t offered on Google Play Store or Apple App Store.
• They ask you to download file attachments or remote access software (such as Teamviewer) to give them remote control of your device. For example, an impersonator may take control and install ransomware on your device and then demand a ransom. If the ransom isn’t paid, you may lose access to your device permanently.
• Impersonators typically use free email domains such as @yahoo.com, @gmail.com, or @protonmail.com. Always read the sender's full email address to know who sent the email. Note: Emails from Deriv will always come from @deriv.com.