Investment
Features
FeesSafety
Academy
More
Pluang+
FAQ article

Is the Crypto Sending Feature on Pluang Safe?

Yes — crypto sending on Pluang is safe, protected by several independent layers of security that work together on every single transfer. Authenticator verification is mandatory for every Crypto Send and cannot be bypassed: if you don't have Authenticator enabled, the feature stays locked. Each send also runs through a fixed verification sequence — your PIN, then an email OTP, then your Authenticator code — so no transfer can leave your account on a single credential alone. On the custody side, Pluang partners with Fireblocks, one of the world's largest digital-asset custody and transfer providers, keeps 70% of crypto assets in offline cold wallet storage, and carries $30 million in institutional cyber-theft coverage.


Security layers for crypto sending:

  • Authenticator is mandatory for every Crypto Send and cannot be bypassed. Without Authenticator enabled, the crypto sending feature stays completely locked.
  • Fixed verification sequence: every send requires your PIN, then an email OTP, then your Authenticator code, in that exact order.
  • 24-hour lock after a PIN change: Crypto Send is blocked for 24 hours each time you change your PIN. All other app features stay available.
  • 48-hour lock after an Authenticator reset: resetting Authenticator pauses Crypto Send for 48 hours as the longest cooling-off period.
  • 24-hour lock after changing your registered email or phone number: updating either contact detail also pauses Crypto Send for 24 hours.
  • Institutional custody: Pluang partners with Fireblocks, holds 70% of crypto assets in cold wallet storage, and carries $30 million in institutional cyber-theft coverage.

Related questions:

Q: Can I send crypto without Authenticator enabled?
No. Authenticator is mandatory for every Crypto Send and cannot be bypassed. If it is not enabled, the sending feature stays locked and no transfer can be started — there is no one-time exception.

Q: Why is Crypto Send blocked for 24 hours after I change my PIN?
This mandatory cool-down applies every time your PIN changes. A freshly changed PIN can signal an account takeover, so pausing sends for 24 hours gives you time to react. Every other feature stays available.

Q: What verification steps does a crypto send require?
Three credentials in a fixed order: your PIN, then an email OTP, then your Authenticator code. All three must line up before the transfer is submitted, so one compromised credential is not enough.

Q: What happens after I reset Authenticator or change my email or phone?
Each triggers a temporary sending lock. Resetting Authenticator blocks Crypto Send for 48 hours; changing your registered email or phone number blocks it for 24 hours, giving you time to act if the change was not made by you.

Q: How does Pluang protect crypto assets in storage?
Pluang partners with Fireblocks for custody and transfer security, keeps 70% of crypto assets in offline cold wallet storage rather than connected hot wallets, and carries $30 million in institutional cyber-theft coverage.