Required Legal Notice: Virtual currencies, real risks. The only guarantee in crypto is risk. Read more

Required Legal Notice: Virtual currencies, real risks. The only guarantee in crypto is risk. Warning: The value of your virtual currencies can rise or fall sharply, and your initial investment may be lost completely; virtual currencies are not covered by the guarantee funds that cover bank deposits; there is no legal mechanism on the virtual currencies market to prevent market manipulation or insider dealing; virtual currencies depend entirely on a specific computer technology and infrastructure, which in certain cases may be very recent and not yet adequately tested; if one loses the identification code or password giving access to the virtual wallet in which the virtual currency is stored, the currency held therein will be irretrievably lost; virtual currencies are currently accepted as a means of payment to a limited extent, and in most countries there is no legal obligation to accept them; for more information about the risks associated with an investment in virtual currencies, we advise you to read the Wikifin page What is a cryptocurrency? | Wikifin.

Is this email from Kraken?

Last updated: 9 снежня 2025 г.

How to differentiate a Kraken email from a phishing email

Emails from Kraken will always have the @kraken.com domain name at the end of them. This includes sub-domains such as @email.kraken.com.

Secure emails from Kraken include:

Brand Indicators for Message Identification (BIMI)

BIMI is implemented across all communications from @kraken.com addresses. You will notice our Kraken logo and a blue checkmark displayed next to verified emails.

What if I don't see a blue checkmark?

• Verify the Sender's Address: Ensure the email is from a legitimate @kraken.com address. Be cautious of lookalike domains or subtle misspellings (e.g., @krakrn.com).

• Check Your Email Client: Not all email clients support BIMI or display blue checkmarks. For example, some versions of email apps may not yet show this feature. Gmail and Outlook are among the clients that support BIMI.

If you receive a Kraken Support or marketing email from any other address besides the ones listed above, do not click on any links that may be provided, as they may not be from Kraken and should not be trusted. If you are still uncertain whether the email you received is from Kraken, fill out this form to let us know. Please don't delete the email until you hear back from us.

Important

If an email comes from a domain that differs by only one or two letters, such as @Krakem.com, this is still a cause for concern and should be reported to Kraken Support.

Kraken will never ask you to:

• Provide your username. Keep your username secret!

• Provide your passwords. Never give out your passwords to anyone who asks.

• Remove your 2FA methods or Master Key.

• Give us access to your devices via remote desktop access software like Teamviewer or AnyDesk.

What is phishing, and how can I prevent it?

Phishing occurs when you receive an unsolicited email or text message on your phone that asks you to click a link, or sign-in to your account. This could be a scammer who is impersonating Kraken, and the link will lead to a website that looks almost identical to the actual Kraken website.

These websites can be malicious. They will ask you to enter your username, password, and sign-in 2FA of your Kraken account. Or, they may ask you to download a file. These files may look harmless, but can be loaded with malware, or be used to gain remote control of your device.

Additional prevention tips:

• Use PGP email encryption (GP-encryption-) to verify the legitimacy of our emails.

• Set up an email account that you only use for Kraken.

• Enable multiple Two-Factor Authentication methods, including phishing-resistant Passkeys.

• When navigating to, or using Kraken, always ensure the URL in your browser is kraken.com.

Bookmark kraken.com in your browser, and only use that to navigate to Kraken.

Never use search engines, emails, social media, or anything else besides your bookmark to find the Kraken website.

1. Secure your devices.

•
Scan all devices for malware.
•
Remove all unofficial Kraken apps from your mobile devices.
•
If you did download suspicious apps or files to your device, backup any important data and reset all your devices to factory settings.

2. Secure your email accounts.

•
Reset the password of your email account.
•
Update or add Two-Factor Authentication (2FA) to your email account.

3. Secure your Kraken account.

•
Reset your password.
•
Generate a new sign-in 2FA. We recommend enabling multiple 2FA.
•
Remove all withdrawal addresses, record all unfamiliar withdrawal addresses; afterwards they are inaccessible.
•
Remove all active sessions and devices, record all unfamiliar IP addresses; afterwards they are inaccessible.

4. Contact our support team.

Once you have completed the security steps above, please contact our support team as soon as possible to begin investigation. Be sure to include details about your situation, and the security steps you've taken above.

I received a legitimate Kraken email, although I didn't perform this action, what should I do?

Account creation email

If you do not have a Kraken account, but received an email that you've created one, your email account may be at risk.

1
Sign-in to your Kraken account.
2
Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email.
If there are any suspicious devices or sessions, close them using the X button and immediately contact our support team.
3
Ensure your Kraken account and email account are secured to your satisfaction.

Password reset email

If you've received an email regarding a password reset on your account, but you did not initiate this reset, contact our support team immediately.

Device approval email

If you've received an email regarding a new device on your account, but you were not in the process of adding a new device, contact our support team immediately.

These emails contain the model, location, and IP address of the new device being used to sign-in.

New withdrawal address email

If you've received an email to confirm a new withdrawal address, but you didn't add a new withdrawal address to your account, contact our support team immediately.

New withdrawal address emails contain the location and IP address of the device used to add the new address.

General Kraken support email

If you didn’t create a ticket request via our forms or emails, it means someone else used your email address to do so. You can safely delete the message.

Please remember that Kraken Support will never contact you via text, phone, or email to request a withdrawal from your account. If you ever receive such a request, it is a scam.

To double check your ticket requests:

1
Log in to your Kraken account.
2
Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email.
If there are any suspicious devices or sessions, close them using the X button and immediately contact our support team.
3
Ensure your Kraken account and email account are secured to your satisfaction.

Is this email from Kraken?

I gave my sign-in credentials to a suspicious website (or person), what should I do?

I received a legitimate Kraken email, although I didn't perform this action, what should I do?

Need more help?