Superhero
Get started

HomePlatformsSecurity

Security, on by default.

The protections we provide on the platform and a few simple habits we ask of you.

Two steps to sign in, then a session.

The password alone does not open the door. The second step is completed with a code in your hands; the session also closes on its own.

  1. Password

    Your e-mail address and a password only you know. Our team never sees your password.

  2. One-time code

    A code generated for each sign-in and valid for a short while. Even if your password is exposed, the account cannot be opened without this step.

  3. Session

    An inactive session closes by itself; on a shared device you sign out when you finish.

Six layers around your account.

A check at every step from sign-in to withdrawal; none of them asks anything extra of you.

  • Two-step login

    Password and one-time code; the same door in the browser and in the app.

  • Encrypted connection

    Every piece of data between the site, SuperTrader, the mobile app and our servers travels over an encrypted connection.

  • Session control

    Inactive sessions close; you see which devices have signed in, in the client area.

  • Role-limited access

    Only the people on our team whose work requires it reach your data, and only as far as their role allows.

  • Kept apart, as practice

    As a working practice, client assets are kept in accounts separate from the company's own.

  • Identity check on withdrawal

    Every withdrawal request passes identity and account checks; where possible the money returns to the method you deposited with.

What we will never ask you for

Scammers often write in our name. If a message asks for any of the following, do not reply.

  • Your password

    Our team does not see or ask for your password; if you forget it, you reset it from the sign-in page.

  • Your two-step codes

    The code is for your sign-in only; anyone asking for it by phone or message is not from us.

  • Your full card number and security code

    A deposit starts in the client area; card details are never asked for in chat, e-mail or on the phone.

  • A remote access app

    We never ask you to install an app that lets someone else connect to your phone or computer.

If you received a suspicious message, let us know. Contact us

A few habits we ask of you.

Most of the layers are our work; a few are in your hands.

  • Choose a password you use only here
  • Keep two-step login turned on
  • Sign out when you finish on a shared device
  • Download the app only from the store links on this site
  • If you notice a sign-in you do not recognise, change your password and write to us

How data is handled

We use your personal data only to run your account and to meet legal obligations.

  • We do not ask for more information than we need
  • Access to your data is limited by role within our team
  • See the privacy policy for details

Frequently asked questions

Can I turn off two-step login?

Two-step login is designed to protect your account, and we recommend keeping it on.

What if I forget my password?

You can reset it from the sign-in page. Our support team will never ask you for your password.

I received a fake message. What should I do?

Do not click links or share details, and forward the message to us.

Can I see which devices have signed in?

Yes. Your open sessions are listed in the client area; you can end a session you do not recognise and change your password.

The call is yours.

No rush. The prices and the terms are here; when you are ready, sign-up is in the secure client area.