Is the Crypto Sending Feature on Pluang Safe?

Yes — crypto sending on Pluang is safe, protected by several independent layers of security that work together on every single transfer. Authenticator verification is mandatory for every Crypto Send and cannot be bypassed: if you don't have Authenticator enabled, the feature stays locked. Each send also runs through a fixed verification sequence — your PIN, then an email OTP, then your Authenticator code — so no transfer can leave your account on a single credential alone. On the custody side, Pluang partners with Fireblocks, one of the world's largest digital-asset custody and transfer providers, keeps 70% of crypto assets in offline cold wallet storage, and carries $30 million in institutional cyber-theft coverage. Layered on top are time-based locks that temporarily freeze sending after sensitive account changes, giving you a window to react if someone ever tampered with your credentials.

• Authenticator is mandatory for every Crypto Send transaction and cannot be bypassed. If Authenticator is not enabled on your account, the crypto sending feature stays completely locked — there is no alternative path around it.
• Fixed verification sequence: every send requires your PIN, then an email OTP, then your Authenticator code, in that exact order. Three separate credentials must line up before a single transfer is allowed to go through.
• 24-hour lock after a PIN change: each time you change or reset your PIN, Crypto Send is automatically blocked for 24 hours as a safeguard — and so is Cashout. Everything else stays available during this window: you can log in, view your portfolio, buy, sell and top up as normal. Only the two routes that move value out of your account are paused.
• 24-hour lock after an Authenticator setup or reset: if you set up a new Authenticator or reset your existing one, Crypto Send and Cashout are blocked for 24 hours. The same 24-hour window applies to every security-sensitive account change — there is no longer a separate, longer window for Authenticator.
• 24-hour lock after changing your registered email or phone number: updating either contact detail also pauses Crypto Send for 24 hours, since these changes can be an early sign of account takeover.
• Institutional custody: Pluang partners with Fireblocks, one of the largest and most secure digital-asset custody and transfer providers globally, holds 70% of crypto assets in cold wallet storage, and carries $30 million in institutional cyber-theft coverage.

Related questions:

Q: Can I send crypto without Authenticator enabled?
No. Authenticator is mandatory for every Crypto Send and cannot be bypassed under any circumstances. If Authenticator is not enabled on your account, the crypto sending feature stays locked and no transfer can be started. Enabling Authenticator is a required setup step before you can send crypto at all, and it must be present on every subsequent send — there is no one-time exception.

Q: Why is Crypto Send blocked for 24 hours after I change my PIN?
This is a mandatory security cool-down that applies every single time your PIN is changed. A freshly changed PIN is a common signal of an account takeover attempt, so pausing outbound sends for 24 hours gives you time to notice and react before any funds can leave. Every other feature in the app stays fully available during that window — only crypto sending is temporarily paused.

Q: What verification steps does a crypto send require?
Every send runs through three credentials in a fixed order: your PIN first, then an email OTP sent to your registered address, then your Authenticator code. All three must be entered correctly and in that sequence before the transfer is submitted. This layered check means that even if one credential were compromised, a transfer still could not be completed without the other two.

Q: What happens after I reset Authenticator or change my email or phone?
Each of these triggers the same 24-hour hold on Crypto Send and Cashout, counted from when the change completed. Seven activities trigger it in total, including a PIN reset, device verification, account reactivation and adding a bank account. The hold exists because such changes can precede unauthorized access, so the pause gives you a chance to act if the change was not made by you.

Q: How does Pluang protect crypto assets in storage?
On the custody side, Pluang partners with Fireblocks, one of the world's largest and most secure digital-asset custody and transfer providers. To reduce exposure, 70% of crypto assets are kept in offline cold wallet storage rather than connected hot wallets, and the setup is backed by $30 million in institutional cyber-theft coverage. Together these measures protect assets held on the platform beyond the checks applied to each individual transfer.