How to enable anti-phishing code on Bybit? (Safety tip)

Understanding Anti-Phishing Code Functionality

1. The anti-phishing code is a user-defined alphanumeric string added to all official email notifications from Bybit.

2. This code appears in the subject line and body of every security-related email, including withdrawal confirmations and login alerts.

3. If an email lacks the correct anti-phishing code, it is highly likely to be fraudulent.

4. The feature does not affect SMS or app-based notifications—it applies exclusively to email communication.

5. Bybit never asks users to disclose their anti-phishing code via email, phone, or chat support.

Navigating to Security Settings

1. Log into your Bybit account using verified credentials and two-factor authentication.

2. Click the user avatar icon located in the top-right corner of the dashboard.

3. Select “Security Center” from the dropdown menu to access layered protection options.

4. Scroll down to the “Anti-Phishing Code” section under the “Account Security” tab.

5. Ensure your registered email address is confirmed and active before proceeding.

Setting Up Your Custom Code

1. Click the “Enable” button next to the anti-phishing code field.

2. Enter a unique 6–12 character combination containing letters and numbers—avoid common words or personal information.

3. Re-enter the same code in the confirmation box to prevent typographical errors.

4. Complete the verification step using your preferred 2FA method—Google Authenticator or SMS.

5. A success message appears once activation completes; no email confirmation is required.

Verifying Code Appearance in Emails

1. Trigger a test notification by initiating a small withdrawal or changing API key permissions.

2. Check your inbox for the corresponding Bybit email and locate the code in both subject and body.

3. Confirm the code matches exactly—case-sensitive and spacing-sensitive.

4. If the code is missing or altered, do not click any links and report the incident through Bybit’s official support portal.

5. Retain a secure record of your code offline, separate from digital devices.

Frequently Asked Questions

Q: Can I change my anti-phishing code after enabling it?Yes. Return to the “Anti-Phishing Code” section in Security Center and click “Modify.” You must re-verify via 2FA each time.

Q: Does the anti-phishing code protect against fake websites?No. It only authenticates official emails. Always verify URLs manually and avoid clicking embedded links in unsolicited messages.

Q: What happens if I forget my anti-phishing code?You can reset it in Security Center without delay. No recovery phrase or KYC re-verification is needed.

Q: Is the anti-phishing code mandatory for withdrawals?No. It is optional but strongly recommended. Withdrawals proceed normally regardless of whether the feature is enabled.