Where does the code appear?

In the emails Midas sends you — sign-in notices, withdrawal confirmations, alerts. Its absence is the signal, so look for it every time rather than only when something feels off.

It should be. Anyone who learns it can forge a convincing email, so keep it off social media and out of support chats that did not start from inside the app.

Does it protect the account itself?

No — it protects you from being tricked into handing the account over. Pair it with 2FA or a passkey, which protect the account.

Does the code appear in push notifications too?

It is an email mechanism. Push notifications come through the app itself, which is already an authenticated channel.

SecurityBeginner

How to Set Up Your Anti-Phishing Code

Create a personal anti-phishing code that appears in all genuine Midas emails, helping you identify fake communications.

6 min

4 steps

An anti-phishing code is a short phrase you choose that Midas includes in every genuine email it sends you. Mail without it is not from Midas, whatever the sender address looks like. It costs a minute to set and it defeats the most common attack on exchange users, which is a convincing email rather than a broken lock.

Before you start

A phrase you will recognise instantly and that is not a password, a name or anything guessable from your public profile.

Navigate to Anti-Phishing Settings

Go to Profile > Security > Anti-Phishing Code. This feature lets you create a personal code word that will be included in all official Midas emails sent to your address.

Create Your Code

Enter a memorable word or short phrase that only you would know. Avoid common words or anything publicly associated with you. This code will appear in the header of every genuine email from Midas.

Verify It Works

After setting the code, Midas will send a test email to your registered address. Open it and verify that your anti-phishing code is displayed correctly. Every future Midas email will contain this code.

Use It to Detect Phishing

If you receive an email claiming to be from Midas but it does not contain your anti-phishing code, it is a phishing attempt. Do not click any links in suspicious emails. Report them to Midas support and delete them immediately.

If something goes wrong

A Midas email arrives with no code in it.: Treat it as phishing. Do not click anything in it; open the app or type the address yourself, and report the mail from within the app.
You cannot remember what you set.: It is shown in security settings and can be changed there. Change it rather than guessing, and check the next genuine email carries the new phrase.
You changed the code and an old email still shows the previous one.: Emails carry the code that was current when they were sent. Judge a message by the code in force at its timestamp, not the one you set afterwards.

Frequently asked questions

Where does the code appear?: In the emails Midas sends you — sign-in notices, withdrawal confirmations, alerts. Its absence is the signal, so look for it every time rather than only when something feels off.
Is the code secret?: It should be. Anyone who learns it can forge a convincing email, so keep it off social media and out of support chats that did not start from inside the app.
Does it protect the account itself?: No — it protects you from being tricked into handing the account over. Pair it with 2FA or a passkey, which protect the account.
Does the code appear in push notifications too?: It is an email mechanism. Push notifications come through the app itself, which is already an authenticated channel.

More in Security