Security and trust levels

Settings → Security — subsections Trust levels and Abuse.

Trust levels

Your own client levels — as many as you need, with a name, code and order. A level has:

• conditions: at least N exchanges, exchanged amount (USDT), days since the first order, passed checks;
• benefits: order limit, manual review, mandatory KYC, better rate.

Levels are recalculated nightly and on demand. Regular clients get convenience and a better rate; new and suspicious ones get more checks. A specific client's level can be changed in their card in People.

Abuse

• Abuse protection — at most N orders per hour from one IP and to one payout address.
• IP bans — manual (reason, period or forever) or automatic: admin password guessing, scanners. A banned address only gets a refusal.
• Lockouts after failed sign-ins and currently locked.
• Most orders per hour — who creates suspiciously many orders.

Every change is logged.

Captcha next version

Settings → Security → Captcha: Cloudflare Turnstile or a built-in one (digits from an image, no external services) on orders, sign-in, registration, support requests and the first chat message. Off by default; not used on the admin subdomain or in the Telegram Mini App. The secret key is stored encrypted.