What Is the 24-Hour Security Hold on Pluang?

The 24-hour security hold is an automatic cooling-off period that blocks cashout and Crypto Send for 24 hours after you complete a security-sensitive change to your Pluang account — for example resetting your PIN, changing your registered email or phone number, setting up a new Authenticator, verifying a new device, reactivating your account, or adding a bank account. It applies to the two routes that move value out of your account, and only those two. Logging in, viewing your portfolio, buying, selling and topping up all keep working normally throughout. The hold exists because those account changes are exactly what an attacker would do first after taking over an account: if someone else had just changed your details, the 24 hours stop them converting that access into an immediate withdrawal, and give you time to notice and act.

What the hold covers:

• Cashout — withdrawing funds to your bank account or e-wallet
• Crypto Send — transferring crypto out to another wallet or address

What it does not cover: logging in, viewing your portfolio and balances, buying and selling across every asset class, and topping up.

Key characteristics:

• Automatic in both directions. It applies without anyone switching it on, and it expires without anyone switching it off.
• Fixed at 24 hours, counted from the moment the account change completed, on Pluang's server time rather than your device clock.
• Not a penalty and not a fault. It is applied to every account equally, regardless of your history or your balance.
• It cannot be lifted on request — including by Pluang Care. Being liftable by asking would defeat the purpose, since an attacker could simply ask too.
• Doing another security-sensitive change during the window restarts the 24 hours from the most recent one.

Why cashout and Crypto Send specifically. Both are effectively irreversible once completed — money that has left for a bank account or crypto that has left for an external wallet cannot be recalled by Pluang. Buying and selling, by contrast, keeps value inside your account where it can still be recovered, which is why those are left available.

Related questions:

Q: Does the 24-hour security hold mean my account has been blocked?
No. Your account stays fully active and you keep normal access to it. Only cashout and Crypto Send are paused; every other feature works as usual. An account that has actually been blocked or frozen cannot be used at all, which is a visibly different experience — if you can log in and see your portfolio, your account is not blocked.

Q: Do I need to do anything to remove the 24-hour hold?
Nothing at all. There is no request to submit, no ticket to raise, no verification to complete and nobody to contact. Cashout and Crypto Send become available again by themselves once 24 hours have passed since the change that triggered the hold. Contacting Pluang Care will not make it end sooner.

Q: Will the Pluang app tell me the 24-hour hold is why I cannot withdraw?
Not currently. There is no banner, countdown or explanatory message in the app for this hold, which is why it often looks like an error. If you completed one of the triggering account changes in the last 24 hours, that is almost certainly the reason — try again once the window has passed.

Q: Is the 24-hour security hold new?
No. The hold itself has been part of Pluang's security design for some time. What is new is this documentation of it — it previously had no clear explanation anywhere, which is why users encountering it read it as a bug rather than as a deliberate protection.