Is this email from Kraken?

Last updated: November 9, 2026

How to differentiate a Kraken email from a phishing email

Emails from Kraken will always have the @kraken.com domain name at the end of them. This includes sub-domains such as @email.kraken.com.

Secure emails from Kraken include:

Brand Indicators for Message Identification (BIMI)

BIMI is implemented across all communications from @kraken.com addresses. You will notice our Kraken logo and a blue checkmark displayed next to verified emails.

What if I don’t see a blue checkmark?

Verify the sender’s address: ensure the email is from a legitimate @kraken.com address. Be cautious of lookalike domains or subtle misspellings (for example, @krakrn.com).
Check your email client: not all email clients support BIMI, so a missing checkmark alone doesn’t mean an email is fake. Gmail is among the clients that support BIMI.

If you receive a Kraken Support or marketing email from any other address besides the ones listed above, do not click on any links that may be provided, as they may not be from Kraken and should not be trusted. If you are still uncertain whether the email you received is from Kraken, report it using our scam report form. Please don’t delete the email until you hear back from us.

Important

If an email comes from a domain that differs by only one or two letters, such as @Krakem.com, this is still a cause for concern. Report it to Kraken Support.

Kraken will never ask you to

Share your username, password, 2FA codes or Master Key.
Share or forward a device approval email, or the link inside it.
Share your seed phrase (also called a recovery phrase), for any wallet.
Remove or change your 2FA, Master Key or Global Settings Lock (GSL), unless you contacted us first for help with it through our official channels.
Install remote access software such as AnyDesk or TeamViewer. See Risks of remote access software.
Send crypto, or move your funds to a “safe” or “secure” wallet or address.
Send a payment to release, unfreeze or “verify” your funds.

Frequently asked questions

What is phishing, and how can I prevent it?

Phishing occurs when you receive an unsolicited email or text message on your phone that asks you to click a link, or sign in to your account. This could be a scammer who is impersonating Kraken, and the link will lead to a website that looks almost identical to the actual Kraken website.

These websites can be malicious. They will ask you to enter your username, password, and Sign-in 2FA of your Kraken account. Or, they may ask you to download a file. These files may look harmless, but can be loaded with malware, or be used to gain remote control of your device.

Additional prevention tips:

Use Passkeys for Sign-in 2FA. A Passkey only works on Kraken’s real website, so it can’t be used on a fake site even if you’re fooled. Add more than one 2FA method. See How to enable multiple 2FA and What is a Passkey?
Optional: turn on PGP email encryption. Kraken can encrypt the emails it sends you using your PGP key, which makes them much harder for scammers to fake. See What is PGP/GPG encryption?
Set up an email account that you only use for Kraken.
When navigating to, or using Kraken, always ensure the URL in your browser is kraken.com.

Bookmark kraken.com in your browser, and only use that to navigate to Kraken.
Never use search engines, emails, social media, or anything else besides your bookmark to find the Kraken website.

Additional reading:

I gave my sign-in credentials to a suspicious website (or person), what should I do?

Contact Kraken Support straight away. Use the suspicious activity form and answer the questions truthfully and as fully as you can. Include what happened and anything you’ve already done. A scammer who has taken over your account may have locked you out, so don’t wait until you’ve tried to fix it yourself.
Secure your email account. Reset the password of your email account and update its two-factor authentication (2FA). Use a Passkey if your email provider supports them.
Secure your devices.
- Scan all devices for malware.
- Remove all unofficial Kraken apps from your mobile devices.
- If you did download suspicious apps or files to your device, back up any important data and reset all your devices to factory settings.
If you can still sign in, secure your Kraken account.
- Reset your password.
- Update your Sign-in 2FA and your Master Key. Use Passkeys, and add more than one 2FA method.
- Delete any withdrawal addresses you don’t recognize.
- Delete any API keys you don’t recognize. See API Key Security.
- Check your connected devices and active sessions and remove any you don’t recognize.

I received a legitimate Kraken email, although I didn’t perform this action, what should I do?

Account creation email

If you received an email saying you created a Kraken account, but you didn’t, someone may have used your email address, and your email account may be at risk.

Secure your email account now. Reset its password and make sure two-factor authentication (2FA) is on. Use a Passkey if your email provider supports them, and add more than one 2FA method.
Check whether a Kraken account exists for your email address. Request a username reminder to that email address. Check your spam folder too.
- If no reminder arrives, no Kraken account was created and there is nothing further to do, apart from making sure your email account and digital life are secured.
- If a reminder arrives, an account was created. Contact Kraken Support straight away.

Password reset email

If you’ve received an email regarding a password reset on your account, but you did not initiate this reset, contact Kraken Support immediately.

Device approval email

If you’ve received an email regarding a new device on your account, but you were not in the process of adding a new device, contact Kraken Support immediately. Don’t click the approval link. Kraken will never ask you to share or forward this email or the link inside it.

These emails contain the model, location, and IP address of the new device being used to sign in.

New withdrawal address email

If you’ve received an email to confirm a new withdrawal address, but you didn’t add a new withdrawal address to your account, contact Kraken Support immediately.

New withdrawal address emails contain the location and IP address of the device used to add the new address.

General Kraken support email

If you didn’t create a ticket request via our forms or emails, it means someone else used your email address to do so. You can safely delete the message.

Please remember that Kraken Support will never contact you via text, phone, or email to request a withdrawal from your account. If you ever receive such a request, it is a scam.

To double check your ticket requests:

Sign in to your Kraken account.
Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email. If there are any suspicious devices or sessions, close them using the X button and immediately contact Kraken Support.
Ensure your Kraken account and email account are secured to your satisfaction.