Which Activities Trigger the 24-Hour Security Hold on Pluang?
Seven activities trigger the 24-hour security hold on Pluang, each blocking cashout and Crypto Send for 24 hours from the moment it completes: reactivating your account, resetting your PIN or using Forgot PIN, verifying a new device, setting up a new Authenticator or resetting your existing one, changing your registered phone number, changing your registered email, and adding a bank account. Unfreezing a frozen account behaves the same way. Every one of them is a change to how your account is accessed or where money can be sent — which is precisely what makes them worth pausing money-out on. The hold applies every time, on every account, and is not affected by how long you have been a Pluang user or how large your balance is.
The seven triggering activities:
| # | Activity | Where it happens |
|---|---|---|
| 1 | Account reactivation | Reactivating a previously deactivated account, via Pluang Care |
| 2 | PIN reset or Forgot PIN | Privacy and Security → Reset PIN, or "Forgot PIN" on the login screen |
| 3 | New device verification | Completing the face and liveness check after logging in on a device you have not used before |
| 4 | Authenticator setup or reset | Setting up a new Authenticator, or resetting an existing one |
| 5 | Phone-number change | Changing your registered mobile number |
| 6 | Email change | Changing your registered email address |
| 7 | Adding a bank account | Registering an additional bank account on your profile |
Plus one more, documented separately: unfreezing an account you had frozen also carries a 24-hour hold on cashout and Crypto Send, with identical mechanics.
Two things worth knowing:
- New device verification is a two-stage restriction. Before you complete the verification, cashout, Crypto Send, Reset PIN and Forgot PIN are all unavailable. After you complete it, Reset PIN and Forgot PIN come back immediately — but cashout and Crypto Send stay held for a further 24 hours, because completing the verification is itself a trigger.
- The hold applies regardless of who made the change. A change you made yourself in the app and a change Pluang Care processed for you both start the same 24 hours.
What does not trigger it: buying or selling assets, topping up, changing your username, updating your NPWP, occupation, income level or emergency contact, requesting a transaction report, or updating your KTP.
Related questions:
Q: Does the hold apply every time I reset my PIN, or only the first time?
Every time, without exception. There is no allowance for repeat changes and no "trusted user" status that exempts you. Each PIN reset starts a fresh 24-hour hold on cashout and Crypto Send from the moment the reset completes, regardless of how recently you last reset it or how many times you have done so.
Q: What happens if I do two triggering activities close together?
The 24 hours restart from the most recent one. If you change your email and then reset your PIN six hours later, the hold runs for 24 hours from the PIN reset, not from the email change — so the total wait from your first action is longer than 24 hours. Grouping account changes into one sitting keeps the overall wait shortest.
Q: Does the hold apply if Pluang Care made the change for me?
Yes. The hold is applied by the system based on the change itself, not on who submitted it. A phone-number change that Pluang Care processed on your behalf triggers exactly the same 24 hours as one you completed in the app, and Pluang Care cannot process the change without it taking effect.
Q: Does adding a bank account really trigger it, even though I am not withdrawing yet?
Yes. Adding a withdrawal destination is one of the highest-value actions an attacker can take, because it is the step that makes a later withdrawal possible. Holding money-out for 24 hours after a new bank account is registered is what stops a newly added account from being used immediately.
Q: Does updating my occupation or NPWP trigger the hold?
No. Profile data updates like occupation, income level, NPWP, emergency contact and username do not affect how your account is accessed or where money can be sent, so they carry no hold. Only the seven activities listed above, plus unfreezing, block cashout and Crypto Send.