Is the Crypto Sending Feature on Pluang Safe?

Yes — crypto sending on Pluang is safe, protected by several independent layers of security that work together on every single transfer. Authenticator verification is mandatory for every Crypto Send and cannot be bypassed: if you don't have Authenticator enabled, the feature stays locked. Each send also runs through a fixed verification sequence — your PIN, then an email OTP, then your Authenticator code — so no transfer can leave your account on a single credential alone. On the custody side, Pluang partners with Fireblocks, one of the world's largest digital-asset custody and transfer providers, keeps 70% of crypto assets in offline cold wallet storage, and carries $30 million in institutional cyber-theft coverage. Layered on top are time-based locks that temporarily freeze sending after sensitive account changes, giving you a window to react if someone ever tampered with your credentials.

• Authenticator is mandatory for every Crypto Send transaction and cannot be bypassed. If Authenticator is not enabled on your account, the crypto sending feature stays completely locked — there is no alternative path around it.
• Fixed verification sequence: every send requires your PIN, then an email OTP, then your Authenticator code, in that exact order. Three separate credentials must line up before a single transfer is allowed to go through.
• 24-hour lock after a PIN change: each time you change your PIN, Crypto Send is automatically blocked for 24 hours as a safeguard. All other app features stay available during this window — only sending crypto is paused.
• 48-hour lock after an Authenticator reset: if you reset your Authenticator, Crypto Send is blocked for 48 hours. Because Authenticator is the strongest layer, resetting it triggers the longest cooling-off period.
• 24-hour lock after changing your registered email or phone number: updating either contact detail also pauses Crypto Send for 24 hours, since these changes can be an early sign of account takeover.
• Institutional custody: Pluang partners with Fireblocks, one of the largest and most secure digital-asset custody and transfer providers globally, holds 70% of crypto assets in cold wallet storage, and carries $30 million in institutional cyber-theft coverage.

Related questions:

Q: Can I send crypto without Authenticator enabled?
No. Authenticator is mandatory for every Crypto Send and cannot be bypassed under any circumstances. If Authenticator is not enabled on your account, the crypto sending feature stays locked and no transfer can be started. Enabling Authenticator is a required setup step before you can send crypto at all, and it must be present on every subsequent send — there is no one-time exception.

Q: Why is Crypto Send blocked for 24 hours after I change my PIN?
This is a mandatory security cool-down that applies every single time your PIN is changed. A freshly changed PIN is a common signal of an account takeover attempt, so pausing outbound sends for 24 hours gives you time to notice and react before any funds can leave. Every other feature in the app stays fully available during that window — only crypto sending is temporarily paused.

Q: What verification steps does a crypto send require?
Every send runs through three credentials in a fixed order: your PIN first, then an email OTP sent to your registered address, then your Authenticator code. All three must be entered correctly and in that sequence before the transfer is submitted. This layered check means that even if one credential were compromised, a transfer still could not be completed without the other two.

Q: What happens after I reset Authenticator or change my email or phone?
Sensitive account changes each trigger a temporary sending lock. Resetting Authenticator blocks Crypto Send for 48 hours, while changing your registered email or phone number blocks it for 24 hours. These cooling-off periods exist because such changes can precede unauthorized access, so the pause gives you a chance to act if the change was not made by you.

Q: How does Pluang protect crypto assets in storage?
On the custody side, Pluang partners with Fireblocks, one of the world's largest and most secure digital-asset custody and transfer providers. To reduce exposure, 70% of crypto assets are kept in offline cold wallet storage rather than connected hot wallets, and the setup is backed by $30 million in institutional cyber-theft coverage. Together these measures protect assets held on the platform beyond the checks applied to each individual transfer.