The security of members’ funds is Indodax’s top priority. Every time you withdraw Rupiah (IDR) from our platform to your bank account, you will be asked to enter a one-time verification code (One-Time Password or OTP) sent to your registered email address. This decision is based on an in-depth cybersecurity risk analysis and aims to provide a stronger layer of defense compared to simple messaging apps.

Indodax strongly recommends that members enable Google Authenticator (GA) as their primary 2FA method, especially for fund withdrawals. GA codes are generated on your own device and change every 30 seconds. Indodax’s decision to use email OTPs and encourage the use of Google Authenticator for fund withdrawals is a proactive step in risk management and fraud prevention. We prioritize the security of your assets and funds over mere convenience. You can enable Google Authenticator on your Indodax account for maximum protection. How do I enable Google Authenticator to protect my account?