A transaction PIN, identity checks, and optional biometrics sit between the account and a payout.

Finding an unlocked phone, or a stolen password, should still not be enough to withdraw. That is the rule the product is built around.

On the account

• Email verification before the account is fully open.
• Transaction PIN for trades, withdrawals, and bills. It is not your login password. Support will not ask for it.
• Two-factor authentication you can turn on for sign-in.
• Biometric lock so the app asks for fingerprint or face when you come back, and can sign you in on that device.
• Device checks when a sign-in needs one more confirmation.

Identity

KYC takes your phone number, personal details, a government ID, and BVN. Bank withdrawals stay closed until that review is done. If a check is rejected, correct it and send it again from the app.

Do this yourself

Use a PIN you do not reuse. Turn on 2FA. Never send crypto to an address a stranger messages you. Exora will not ask you to move funds to “unlock” an account.