Articles on: Security & Settings

Various security measures

How do I protect my Mercury Iconex account?


The security of your Mercury Iconex account starts with you.


In the world of cryptocurrency and digital assets, protecting your account, personal information, and digital holdings is of the utmost importance. Cybercriminals are constantly developing new methods to gain access to accounts, passwords, and financial resources.


Examples include phishing, identity fraud, social engineering, malware, and unauthorized access to personal accounts.


While Mercury Iconex implements various measures to secure its trading platform, your own online behavior also plays a crucial role.


This guide provides practical recommendations to help you better protect your Mercury Iconex account and reduce the risk of misuse.


1. Use a strong and unique password


Your password is one of the most important security tools for your account.


We recommend that you:


  • Use a strong password that includes a combination of uppercase letters, lowercase letters, numbers, and special characters.
  • Use a unique password for your Mercury Iconex account—one that you do not use anywhere else.
  • Avoid using obvious passwords or personal information, such as your date of birth, name, or phone number.
  • Never share your password with others.
  • Store your password, ideally, in a reliable password manager.


It is best to use a long password or a unique passphrase. A password manager can help you generate strong, unique passwords and store them securely.


2. Enable Two-Factor Authentication (2FA)


We advise every user to enable Two-Factor Authentication (2FA).


By using 2FA, you add an extra layer of security to your account. In addition to your email address and password, an extra verification code is required whenever the platform requests it.


For this security measure, you can use an authenticator app, such as Google Authenticator.


Our recommendations:


  • Whenever both options are available, prefer using an authenticator app over SMS-based verification.
  • Keep your authenticator app—and the smartphone on which it is installed—secure.
  • Never share your verification codes with anyone else.
  • If recovery information is provided during the setup process, ensure it is stored safely.


SMS-based verification can be vulnerable to threats such as "SIM swapping," where criminals attempt to take control of your phone number.


Consult our guide:


Setting up 2FA for added security


3. Keep your recovery information secure


If you lose your smartphone, replace it, or otherwise lose access to your authenticator app, you may no longer be able to generate 2FA codes yourself.


Therefore, ensure you have a secure recovery method in place beforehand.


  • Store any recovery codes provided by Mercury Iconex during the setup process in a safe place.
  • If you intend to use your secret 2FA key as a recovery method, ensure it is kept only in a secure location.
  • Ideally, store recovery information offline or within a reliably secure system.
  • Do not store sensitive recovery information unprotected in your email, messaging apps, or standard notes on your smartphone.


Important: A recovery code, a secret 2FA key, and a temporary verification code are distinct pieces of information. Do not share any of these with anyone.


4. Secure your email account


Your email address is a key component in the security of your Mercury Iconex account.


It is used for verification messages, security alerts, password recovery, and other account-related communications.


If someone gains unauthorized access to your email account, it could also compromise the security of your Mercury Iconex account.


We therefore recommend that you:


  • Use a strong, unique password for your email account.
  • Enable 2FA for your email account as well.
  • Regularly review your logged-in devices and active sessions.
  • Sign out of any unknown devices or sessions.
  • Carefully scrutinize suspicious emails and requests for personal information.


Protect your email account with the same level of care as you do your cryptocurrency account.


5. Regularly check your account activity


Check your Mercury Iconex account regularly to spot any unusual or unexpected activity in a timely manner.


For example, keep an eye out for:


  • Unrecognized login attempts.
  • Unexpected password changes.
  • Security notifications that you did not initiate.
  • Unrecognized transactions or withdrawals.
  • Unexpected changes to your account details.


If the platform offers notifications for significant account activity, we recommend enabling them.


Have you discovered activity that you do not recognize?


Contact the Mercury Iconex Support team immediately. We also advise you to change your password and terminate any suspicious active sessions, if possible.


Do not wait until funds have actually gone missing.


6. Protect your digital assets with a hardware wallet


If you intend to store larger amounts of cryptocurrency for an extended period, consider using a hardware wallet.


A hardware wallet—such as a device from Ledger or Trezor—stores your private keys on a separate device, helping to protect them from online threats.


This is particularly relevant for users who wish to hold digital assets for the long term rather than trading them frequently.


Keep the following in mind:


  • Only purchase hardware wallets directly from the official manufacturer or an authorized retailer.
  • Store your recovery phrase (also known as a seed phrase) in a secure, preferably offline, location.
  • Never share your recovery phrase with anyone.
  • Never enter your recovery phrase on unknown websites or into suspicious applications. * Always check the receiving address on your hardware wallet before confirming a transaction.


7. Use internet connections safely


The connection you use to access your account can affect your online security.


We recommend that you:


  • Preferably use a trusted and secure Wi-Fi network.
  • Avoid using public Wi-Fi networks for financial transactions or account management.
  • Use a reliable VPN service if you must connect via a public network.
  • Refrain from using your device for financial transactions if you suspect it is infected with malware.
  • Never ignore security warnings from your browser.


While a VPN can provide certain protections for your internet traffic, it does not guarantee the security of your device or account. Therefore, always employ additional security measures.


8. Be alert to phishing, scams, and social engineering


Phishing and social engineering are among the most common methods used by cybercriminals to gain access to accounts and personal information.


Criminals may impersonate Mercury Iconex staff, technical support personnel, payment providers, or other trusted entities.


This can occur through:


  • Emails containing fraudulent links.
  • Messages sent via WhatsApp or Telegram.
  • Fake websites designed to resemble the official trading platform.
  • Imposter customer service accounts.
  • Phone calls requesting passwords or verification codes.
  • Messages that pressure you into executing a transaction immediately.


Protect yourself as follows:


  • Do not click on links or attachments in unexpected messages. * Always verify the sender's full email address or account details.
  • Check the domain name before logging in.
  • Never share your password, 2FA code, recovery code, or secret wallet credentials.
  • Do not trust anyone who asks you to send cryptocurrency to a supposedly "secure" or "temporary" wallet address.
  • Never allow strangers to gain remote access to your computer or smartphone to manage your account.


Use only the official Mercury Iconex websites:



We recommend bookmarking these websites in your browser so that you do not have to navigate to them via external search results each time.


9. Carefully check wallet addresses and blockchain networks


Cryptocurrency transactions are generally irreversible. An incorrectly entered wallet address or an incorrectly selected blockchain network can lead to the permanent loss of your digital assets.


Therefore, before every withdrawal, verify the following:


  • That you have entered the correct receiving address.
  • That the selected blockchain network matches the network supported by the receiving wallet.
  • That the digital assets correspond to what the recipient expects.
  • That the amount and any applicable transaction fees are correct.


Additional security tip: Never blindly paste a wallet address from your clipboard. Malicious software can silently replace a copied wallet address with an attacker’s address.


Always check the full address displayed on your screen and compare it against the original intended receiving address.


10. Protect your computer and smartphone


A well-secured device serves as an important first line of defense against cyberattacks.


We recommend that you:


  • Use reliable antivirus and security software.
  • Regularly update your operating system.
  • Keep your browser and applications up to date.
  • Install applications only via official app stores or trusted providers.
  • Avoid unknown browser extensions.
  • Refrain from downloading suspicious files or applications.
  • Secure your computer and smartphone with a passcode, PIN, or biometric lock.


Exercise extra caution with applications that request access to your screen, keyboard, clipboard, or other sensitive functions.


11. Restrict access to your account


Your Mercury Iconex account is personal and should be managed exclusively by you.


  • Never share your login credentials with third parties.
  • Do not allow unknown individuals to log in or perform transactions on your behalf.
  • Avoid using public or shared computers for account management whenever possible.
  • Always log out after use when working on a device that is not used exclusively by you.
  • Regularly check which devices have access to your email account and other linked services.
  • Do not store your login credentials in unsecured documents or messaging apps.


If the platform offers additional security features—such as device management, session management, or withdrawal restrictions—we strongly recommend that you utilize them.


12. Complete your identity verification (KYC)


Mercury Iconex employs Know Your Customer (KYC) procedures to verify the identity of its users.


This process is carried out in collaboration with our third-party verification partner, iDenfy.


KYC helps identify users and supports measures to prevent identity fraud, the misuse of financial services, and other suspicious activities.


We advise you to:


  • Provide accurate and complete personal information.
  • Use a valid and clearly legible identity document.
  • Follow the verification instructions precisely.
  • Submit your identity documents exclusively through the official verification process.


For more information, please consult our knowledge base articles on KYC and identity verification.


13. Be extra cautious regarding AI-generated fraud


Due to the rapid development of artificial intelligence (AI), fraudulent messages, images, voices, and videos are becoming increasingly convincing.


Criminals can use AI to impersonate employees, business partners, acquaintances, or other trusted individuals.


Therefore, remain alert if someone:


  • Approaches you unexpectedly with an urgent request for money or cryptocurrency.
  • Asks you to carry out a transaction via a phone call or video message.
  • Requests that you provide security credentials or access to your account.
  • Pressures you to act quickly or keep a matter secret.


Our recommendation: Always verify unexpected requests through an independent communication channel that you already know and trust. Do not rely solely on a recognizable voice, image, name, or profile picture.


14. Use official communication channels for support


If you have questions about your account, discover a security issue, or suspect that you have become a victim of fraud, please contact us via Mercury Iconex’s official communication channels.


Do not follow instructions from unknown individuals claiming to be our staff or support team.


Never share your password, 2FA codes, or secret wallet credentials to receive support.


If you suspect that your account has been compromised:


  1. Stop executing transactions immediately.
  2. Change your password, provided you still have secure access to your account.
  3. Terminate any suspicious active sessions, if this option is available. 4. Secure your email account as well.
  4. Contact Mercury Iconex Support as soon as possible.


The sooner you act, the greater the chance that further damage can be mitigated.



Your digital security is a shared responsibility


Mercury Iconex remains committed to providing a reliable and secure digital financial environment. Nevertheless, no online platform can guarantee complete protection against all forms of cybercrime.


By using strong passwords, enabling 2FA, keeping your devices up to date, and remaining alert to suspicious activity, you reduce the risk of unauthorized access to and misuse of your account.


Stay alert. Protect your data. Manage your digital assets responsibly.


Mercury Iconex — The One For All & All For One CEX.

Updated on: 03/11/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!