How Do I Secure My Cryptocurrency?

Cryptoassets are high-risk investments and may not be suitable for all investors. Their prices can be highly volatile, and you could lose some or all of the money you invest.

Cryptoassets are not regulated in the same way as traditional investments and are not covered by the Financial Services Compensation Scheme (FSCS). Protection from the Financial Ombudsman Service (FOS) is limited.

During periods of extreme market volatility, liquidity may be reduced, which can affect your ability to buy or sell crypto at your desired price.

You should take time to understand how crypto works and the risks involved before investing. For more information, visit IG’s Crypto Risks page.

What security certifications does the custodian have?

Your cryptoassets are held by Coinbase Prime, a regulated custodian that maintains industry-leading security certifications:

SOC 1 Type 2 certification - Ensures proper controls over financial reporting
SOC 2 Type 2 certification - Verifies security, availability, processing integrity, confidentiality, and privacy controls

These certifications demonstrate that the custodian's security systems and processes have been independently audited and verified by third-party assessors.

Additionally, IG maintains PCI/DSS compliance for secure payment card processing when you deposit funds to your IG accounts.

How are my assets protected?

Your cryptoassets are secured through multiple layers of protection:

Cold storage: The majority of assets are stored offline, away from internet access
Multi-signature wallets: Multiple approvals required for transactions
Encryption: All transactions and personal data are encrypted
24/7 monitoring: Security Operations Centre monitors for threats continuously
Regular audits: Security audits and penetration testing conducted regularly
Insurance coverage: Digital assets are covered by institutional-grade insurance
Segregated custody: Your assets are separately identifiable and protected

How do I protect my account?

Create a strong password:

Use unique combinations of letters, numbers, and special characters
Don't reuse passwords from other services
Change it regularly
Never share it with anyone
IG will email you about unusual account activity

Enable two-factor authentication (2FA):

Activate 2FA immediately after account creation
Use an authenticator app instead of SMS when possible
Store backup codes securely
Never share your 2FA codes

Watch for phishing attempts:

Be suspicious of:

Emails claiming to be from IG requesting security information
Messages with suspicious links
Requests for credentials
Unsolicited investment offers

Contact official support directly if unsure.

Keep devices and connections secure:

Never leave devices unattended while logged in
Avoid public Wi-Fi
Use secure connections (https/padlock symbol)
Install security software
Enable firewall protection
Always log out when finished

How is my identity protected?

Your personal information is secured through:

Data encryption meeting international standards
Robust KYC (Know Your Customer) processes
Anti-Money Laundering controls
Real-time monitoring of unusual activity
Background checks for all staff
Regular security and privacy training

How are my transactions secured?

Payment Card Industry Data Security Standard

IG is certified to PCI/DSS, ensuring:

Secure processing of payment information
Protection from fraudulent use
Continuous system monitoring
Immediate response to detected threats

Transparency features

You can:

View your transaction history
Check your asset holdings
Monitor price movements in real-time
Access daily statements showing end-of-day positions

Cryptocurrency investments involve significant risks alongside potential opportunities. These investments are considered to be highly risky due to their potential for losses.