https://wuxrin.com/ Notes on the permission layer of a custodial crypto exchange account: the settings, the ways people are approached, and what the response looks like afterwards. en 1440 https://wuxrin.com/guides/account-settings-before-first-deposit/ https://wuxrin.com/guides/account-settings-before-first-deposit/ Sat, 19 Sep 2026 08:47:00 +0000 A new exchange account arrives with almost everything switched off. This is the sequence worth following before the first deposit, grouped by what stops entry, what limits the damage once someone is in, and what tells you it happened at all. It also names the two settings people enable and then quietly work around for a month. https://wuxrin.com/guides/binance-account-opening-guide/ https://wuxrin.com/guides/binance-account-opening-guide/ Sat, 19 Sep 2026 09:12:00 +0000 Sign-up takes minutes and verification takes as long as it takes. The part worth planning is the gap between them, because the security settings that are trivial on an empty account become awkward once there is a balance. Includes what causes verification delays and where people get stuck. https://wuxrin.com/guides/two-factor-authentication-choices/ https://wuxrin.com/guides/two-factor-authentication-choices/ Sat, 19 Sep 2026 09:31:00 +0000 Text message, authenticator app, passkey and hardware key are not four grades of the same product. Each resists a different attack and fails in a different way, and the right choice depends on which failure you are more likely to meet. https://wuxrin.com/guides/authenticator-app-new-phone/ https://wuxrin.com/guides/authenticator-app-new-phone/ Sat, 19 Sep 2026 09:58:00 +0000 Migrating an authenticator is a ten-minute job while the old device still turns on, and a multi-day identity process once it does not. Both routes, including how to get through account recovery in a single pass rather than three. https://wuxrin.com/guides/backup-codes-and-recovery-paths/ https://wuxrin.com/guides/backup-codes-and-recovery-paths/ Sat, 19 Sep 2026 10:06:00 +0000 Recovery codes tend to get saved somewhere that disappears at the same moment the authenticator does. Three storage arrangements that fail this test, four that hold, and a two-minute check that does not cost you a code. https://wuxrin.com/guides/withdrawal-allowlist-and-waiting-period/ https://wuxrin.com/guides/withdrawal-allowlist-and-waiting-period/ Sat, 19 Sep 2026 10:24:00 +0000 An address allowlist can be edited by whoever is holding the account. What converts it into a real defence is the hold on newly added addresses, a separate setting. How the feature is built, whether the trade suits your account, and the split that resolves it. https://wuxrin.com/guides/api-key-permissions/ https://wuxrin.com/guides/api-key-permissions/ Sat, 19 Sep 2026 10:52:00 +0000 An API key lets software act on an account without a login or a second factor. What each permission grants if the key leaks, why IP restriction does most of the work, and why the correct number of keys for most readers is zero. https://wuxrin.com/guides/sessions-devices-login-history/ https://wuxrin.com/guides/sessions-devices-login-history/ Sat, 19 Sep 2026 11:09:00 +0000 Device lists, login records and account-change logs are the only part of an exchange account that tells you something happened. Which oddities are harmless, which are not, and a five-minute monthly routine that works when you are tired. https://wuxrin.com/guides/anti-phishing-code/ https://wuxrin.com/guides/anti-phishing-code/ Sat, 19 Sep 2026 11:37:00 +0000 An exchange that offers an anti-phishing code puts it in its genuine emails and texts. A message without it is not one to act on; a message with it proves less than it seems to. Setup rules, and the three attacks it does nothing about. https://wuxrin.com/guides/is-this-exchange-email-real/ https://wuxrin.com/guides/is-this-exchange-email-real/ Sat, 19 Sep 2026 11:44:00 +0000 The anti-phishing code, the full sender address, the destination behind the link, and then checking the claim from inside the account instead. About a minute in total, and the order means you often stop after the first. https://wuxrin.com/guides/support-contacted-you-first/ https://wuxrin.com/guides/support-contacted-you-first/ Sat, 19 Sep 2026 13:15:00 +0000 A conversation you did not start cannot be checked from inside it. Four standard openings of a fake support approach, what each one is building towards, and a prepared sentence that ends the call without an argument. https://wuxrin.com/guides/sim-swap-and-phone-numbers/ https://wuxrin.com/guides/sim-swap-and-phone-numbers/ Sat, 19 Sep 2026 13:41:00 +0000 A SIM swap is a customer service request granted by someone who believed a story. What a phone number still unlocks, two changes that stop it being used to get into your account, and what the takeover looks like while it is happening. https://wuxrin.com/guides/first-hour-after-compromise/ https://wuxrin.com/guides/first-hour-after-compromise/ Sat, 19 Sep 2026 14:26:00 +0000 Four starting states, sorted by what you still control rather than by what happened, each with a different first action. Plus what to record while it is going on, and an honest account of what recovery can and cannot achieve. https://wuxrin.com/guides/gave-scammer-verification-code/ https://wuxrin.com/guides/gave-scammer-verification-code/ Sat, 19 Sep 2026 14:33:00 +0000 You read six digits out over the phone, or typed them into a copy of the login page. Nothing can be done about the code itself, and what can be done depends entirely on which action it authorised — a login, a password reset, a withdrawal, or a quietly planted address. How to tell which, and the ten minutes that follow. https://wuxrin.com/guides/account-restricted-and-appeals/ https://wuxrin.com/guides/account-restricted-and-appeals/ Sat, 19 Sep 2026 15:02:00 +0000 Security hold or compliance review — they produce the same banner and need completely different replies. What tends to trigger one, the three things a reviewer is trying to establish, and how to write a reply that shortens the wait. https://wuxrin.com/guides/recovery-services-second-scam/ https://wuxrin.com/guides/recovery-services-second-scam/ Sat, 19 Sep 2026 15:58:00 +0000 Offers to trace and recover stolen funds arrive because the first loss was mentioned somewhere public. The shape of the offer, three claims that settle it, and the small number of routes that are actually legitimate.