Is this email from Kraken?

Last updated: Dec 9, 2025

Emails from Kraken will always have the @kraken.com domain name at the end of them. This includes sub-domains such as @email.kraken.com.

BIMI is implemented across all communications from @kraken.com addresses. You will notice our Kraken logo and a blue checkmark displayed next to verified emails.

BIMI


What if I don't see a blue checkmark?

• Verify the Sender's Address: Ensure the email is from a legitimate @kraken.com address. Be cautious of lookalike domains or subtle misspellings (e.g., @krakrn.com).

• Check Your Email Client: Not all email clients support BIMI or display blue checkmarks. For example, some versions of email apps may not yet show this feature. Gmail and Outlook are among the clients that support BIMI.

If you receive a Kraken Support or marketing email from any other address besides the ones listed above, do not click on any links that may be provided, as they may not be from Kraken and should not be trusted. If you are still uncertain whether the email you received is from Kraken, fill out this form to let us know. Please don't delete the email until you hear back from us.

Important

If an email comes from a domain that differs by only one or two letters, such as @Krakem.com, this is still a cause for concern and should be reported to Kraken Support.

• Provide your username. Keep your username secret!

• Provide your passwords. Never give out your passwords to anyone who asks.

• Remove your 2FA methods or Master Key.

• Give us access to your devices via remote desktop access software like Teamviewer or AnyDesk.

Phishing occurs when you receive an unsolicited email or text message on your phone that asks you to click a link, or sign-in to your account. This could be a scammer who is impersonating Kraken, and the link will lead to a website that looks almost identical to the actual Kraken website.

These websites can be malicious. They will ask you to enter your username, password, and sign-in 2FA of your Kraken account. Or, they may ask you to download a file. These files may look harmless, but can be loaded with malware, or be used to gain remote control of your device.

• Use PGP email encryption (GP-encryption-) to verify the legitimacy of our emails.

• Set up an email account that you only use for Kraken.

• Enable multiple Two-Factor Authentication methods, including phishing-resistant Passkeys.

• When navigating to, or using Kraken, always ensure the URL in your browser is kraken.com.

kraken.com

Bookmark kraken.com in your browser, and only use that to navigate to Kraken.

Never use search engines, emails, social media, or anything else besides your bookmark to find the Kraken website.

I gave my sign-in credentials to a suspicious website (or person), what should I do?

  • •

    Scan all devices for malware.

  • •

    Remove all unofficial Kraken apps from your mobile devices.

  • •

    If you did download suspicious apps or files to your device, backup any important data and reset all your devices to factory settings.

  • •

    Reset the password of your email account.

  • •

    Update or add Two-Factor Authentication (2FA) to your email account.

Once you have completed the security steps above, please contact our support team as soon as possible to begin investigation. Be sure to include details about your situation, and the security steps you've taken above.

I received a legitimate Kraken email, although I didn't perform this action, what should I do?

If you do not have a Kraken account, but received an email that you've created one, your email account may be at risk. 

  1. 1

    Sign-in to your Kraken account.

  2. 2

    Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email.

    If there are any suspicious devices or sessions, close them using the X button and immediately contact our support team.

  3. 3

    Ensure your Kraken account and email account are secured to your satisfaction.

If you've received an email regarding a password reset on your account, but you did not initiate this reset, contact our support team immediately.

If you've received an email regarding a new device on your account, but you were not in the process of adding a new device, contact our support team immediately.

These emails contain the model, location, and IP address of the new device being used to sign-in.

If you've received an email to confirm a new withdrawal address, but you didn't add a new withdrawal address to your account, contact our support team immediately.

New withdrawal address emails contain the location and IP address of the device used to add the new address.

If you didn’t create a ticket request via our forms or emails, it means someone else used your email address to do so. You can safely delete the message.

Please remember that Kraken Support will never contact you via text, phone, or email to request a withdrawal from your account. If you ever receive such a request, it is a scam.

To double check your ticket requests:

  1. 1

    Log in to your Kraken account.

  2. 2

    Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email.

    If there are any suspicious devices or sessions, close them using the X button and immediately contact our support team.

  3. 3

    Ensure your Kraken account and email account are secured to your satisfaction.

Need more help?