Bitcoin Forum

 :)please answer if you have enough information about bittrex site....thanks :)

One of my friend in other country have my user and password in bittrex and have my scan of passport too, but she has't my email password that i sign up with it in bittrex. so can she withdraw with any method my balances in this bittrex account or not?

I think the answer is "no" but i want to be sure and maybe with some method she can?

This should answer your question. I got this from bittrex support articles.


But why does your "friend" has your login credentials and a scan of your passport in the first place? No matter how trusted he is, you shouldn't give such data to him, you should now change your password and activate your 2fa (If you haven't) but please note that since he has your passport scan he can still impersonate you in some sites.

------------------
bittrex support ::
If you have two-factor enabled, you will need to enter your 6 digit code and press Confirm. If you do not have two-factor enabled you will need to login to your email account and click the verification link we send you.
--------------------


it's for first time that you must verify new ip and after you don't need to verify the ip again.

The answer is no. But your "friend" should easily be able to open another account at Bittrex or even at any other new website and use your ID to verify the account. Either way, your friend doesn't seem to be an actual friend. She has no business holding your personal ID information, worst case scenario, you both attempt to sign up with your identity, the site detects it and marks it as fraud, you get your accounts closed and your ID marked as fraudulent.

Two factor is different from verifying new ip. You only verify for one time but with 2 factor activated you have to use a set of code every time you login or withdraw. If your friend doesn't know the email then she can't withdraw there's also this
where users can ask for an email to be changed but it'll require a couple of informations about the account.


You can also whitelist your crypto address just to make things more secure and if your friend accidentally withdraw from your account the coins would just land to your address.

Why did you give your account to your friend in the first place? that is risky who knows what she could do with your info.

Why don't you simply change your password to the said bittrex account if you are so worried about her transferring your coins? Its easier since she doesn't have access to the email and password that you signed u with. To me, your main concern should be what she could do with your passport info.

There are a lot of true friends that we have in our life,and we treasure them next to our family, but we should always have limitations also in terms of our financial matter, media account password,  it must be a keepsake within yourself, and we must always set privacy and security for ourselves. So please never do that again, because sometimes being too complacent, and so much giving trust to anyone would possibly harm you one day. Set privacy and security for a brighter future😊

Better to change your password immediately using your registered email or holding the word trust to a friend you used to call with. Wondering why you told those thing to your friend, specially your passport. Thinking that she is your girl friend before and now she is you ex-gf a.k.a friend. Disaster folks!

Those are vital informations, why would you even give those things to your friend? You should be weary of human beings, cause most times they are unpredictable and their actions can't seems to be what we expected. I suggest you should change your password of your exchange or if possible, open another account in the exchange and don't use the same information you used in the one she knows. You may trust her but like I said humans are unpredictable.

This is the problem on some people which they do easily trust out people on the net even you would called them as a friend anytime they can betray you for the sake of money.Handling out sensible information like passports would really put you in risk  since he can impersonate you anytime not only on bittrex but also into other terms.Idea above posted by Potato Chips will really give you some idea.

Bittrex prompts a verification every time you use a different IP even with 2FA enabled. My internet connection is dynamic IP so I go through this virtually every log in.

But I would advise in any case to change passwords, put 2FA on your email if you're able, and in future trust NO ONE with your personal credentials. Especially a female unless it's a family member (no sexist provocation intended). As others have said, Ex-girlfriend or friend with benefits or anything of that nature could put you at high risk.

Even though she doesn't have your email, she could get it from the personal info section on your Bittrex account. If i'm not mistaken that's your user name clearly written under account summary (well mine is). And holding your ID could give her unauthorised access to forgotten password requests on email etc.

Most exchanges require you to submit a selfie of you holding your ID, so her options are limited in that regard.

But be careful dude.



 

I would feel very unsafe if ai were in your situation and would change password to this account even if she can't have my coins withdrawn. Having few USD in my account doesn't mean someone can already take it as their own. Bittrex may find something sketchy to accounts being logged in two different country.

Bittrex is the most trustworthy and the most secure trading exchange amongst all other trading exchanges and that it is not possible for anyone to take away even a single penny out of your bittrex account if he or she does not your email password. You need to worry about such kind of thing but you need to keep all of your credentials secure in order to avoid any unwanted situation.

It is always better in first place to not share the id and password only. If need be only share it with you family members so that just in case if anything happens or need require they can withdraw the funds from it. And in such case changing of the password if one option and another option would be to create a new account on the exchange and trade their rather than using this account.

Agree. You should make sure whether the 2fa or email verification you are using.

If the money in the account is yours, you should change the password and take back the account. If the money is hers, you should transfer the account to her, and ask her to verify the account with her own passport.

I don't even trust out my accounts specially on trading even to my girlfriend or any other friends.You cant still be sure even our loved ones can really betray you out when it comes to money how much more into other people.When we are already talking about money then better to secure out the informations away from peoples awareness.Setting out 2fa in both trading account and into your email would really give a pain in the head for someone who would try to bruteforce your account.

Every time you want to withdraw from bittrex, a mail is always sent to you. It is different from logging in I guess. At least I have always received these emails to verify withdrawal. It is for security purpose. I wonder why you would have to go through that length anyway, giving someone your details to your account. That is absurd. If the person needed your account to trade, you should have used API for trading purpose alone and let the person use that. At least she would not need to login all the time to trade and anytime she wants to withdraw, you are the master.

What? Your so generous my friend. Next time let him hold your coins for good, sarcastically. I can’t blame you or your friend on trusting each other, but if your worried about it, then there is something wrong happen that makes this trust bonds broken. In this forum or any online platform, the motto is “don’t trust anyone” but in real world is different and we understand that but with limitations.

Now change your password and talk to that woman if she deserve to be trusted with those pictures.

Eventually if care is not taken, this is what would end up happening. Nevertheless, since he has decided to give the girlfriend ;D all his details, I hope the email details were not given as well. The thing is bittrex will surely give a notification for withdrawal if 2FA is not enabled. If 2FA enabled, all she will need is the 2FA code to get in, but that still live the account vulnerable anyway, since she will need it to always log in, so how will the OP be able to differentiate the two activities?

Why on earth did you give your friend your account details in the first place? Whether he or she, no one can be trusted. In any case, you should have at least made two factor authentication enabled or rather than giving your friend the full details of the account, you could have generated a bittrex API for just trading, and then give her that to use on a platform like coinigy or tabtrader.

However, with 2FA enabled, she cannot make any withdrawal, but what is the point when she will have to request for the 2FA code anytime she wants to login anyway?

He should be safe. Normally, there is no way you can withdraw from bittrex without giving a go ahead with an email. I actually got 2FA enabled on my account anyway and bittrex would always request for that.

The case here is that, most times, even if you want to login, these details are required, and how will he know if the friend is requesting for the 2FA code to login or to withdraw? Since they are friends, probably, they may trust each other to some level anyway for him to have dropped all those details.

I am a little confused as to why your friends have very personal information. If he is a little smart you can also lose your own email address, in the end your friend will have the whole.
You should not give the information, because that will be your own loss. Of course he can withdraw all the funds you have in bitrex. He just needs to file a change of data or he pretends to lose the email address you have. He only needs to enter your personal data with his passport.

I don't understand, how it can be that your friend have your passwors and passport scan? For gods sake, why did you gave it him? Maybe you also gave him your wallet private keys, access to bank account and etc? If not, you should give it him, because you have to trust in your friend...
Seriously, change your password and enable 2FA. Then you will be sure that your friend wont be able to withdraw your funds. But he can make you some problems with your passport scan if he will involve in fraud operations. But if it's true friend, you should hope that he wont do that.

If your friend doesn't know the password of your email address you will still need to change your password with your email address with a strong one. Especially if you have huge amount in your bittrex, well why do you need to give your information with your friend?

I looks like somebody broke up with girlfriend or something like this...difficult situation, but you can be calm - she wouldn't be able to withdraw anything for sure.

I don't think she can do anything with this. Because when she will try to login to your account you will get a mail to verify new ip and there will be also a option to ignor it, so you can ignore if you saw somthing not normal. the scan passport copy, she can only use the copy to verify any KYC.

I think you should be fine. Make sure to change the security setting required 2FA and email to notify you when someone is login to your account. Keep the minimum funds that. You should never keep your funds at any exchanges for a long period of time.

Exactly but if she will login and change the security key then you will have nothing to do with this, I don’t know why you have given all the password and the information about your to her, most of the time people use to this mistake at the starting days of investment so I think you should change it as soon as possible, your bitcoin password is not worth sharing so don’t do this mistake again, blind trust can make you lose everything.

I must say that this is not a very good idea to trust this much to someone that you have started sharing such a confidential details to anyone. You need to be very much careful when it comes to that of investing of your money or anything which can have an effect on your coins or investment. If you made such kind of mistake, then you may also suffer the loss of your coins and then you will regret.

be ready to get an info about your brand new bank loan that she got for you =)

No matter how someone is never give them your login details or any credentials of yours, if you have already don that just go change your detail immediately, Trust no one.

Yeah I will also suggest you to change your password and all other details that your friend has, because it is a matter of money and today nobody trust anybody to have his paw word or any other data about your account. I will give my brother cash if he wants but will never give him my ATM card. It means that you give keys of your money locker. Be careful dear.

I do not think she can as the moment they try to access Bittrex and say forgot password, they would email you reset steps, but email paswords are easy to crack...so you need to also activate 2FA   

You have to be careful with giving your details and passport and login credentials and things like that to other people... up to you though I suppose.

Maybe his friend do have the access on his trading account where he do let that guy handle his trades thats only my presumption.When it comes to possible withdrawals then its impossible as long the authentication is enabled where it would really be sent on the email. The issue here is that he do have your passport which as being said above he can possibly impersonate you into other sites.

I see most of the exchanges have the rules like accessing the exchange wallet with the different IP will not work to them. They ask to verify the browser or IP changed push notification on the front page itself.
So no need to fear that he will loose the money by the accessing his wallet unless his friend uses his own phone when he is absent.
If he has enabled the 2FA with the authenticator or paper. Then he does not a single attack from anyone.

Still giving personal ID proofs to other people is not a good idea.

I had also the same situation with my friend and he could not withdraw my tokens without the confirmation link so as soon as you don`t give full control to every account I guess you are safe.

Why don’t you simply change your login details? I also agree to the fact that your friend can easily ask for a password reset as if she was the real owner of your account since she has your email. She just needs to reset the password to your mail and then use it to reset that of the trading account.

     "Don't Trust Anyone" even it is your girl friend or best friend,etc....You should keep your important information because you might be at risk. And because now that is already happened to you there is a possibility that your friend can get your money or coins at bittrix. But if your friend doesn't know and has no full control about your account on bittrix i think your account is safe but you can change your password and set up two factor autentication if you still have doubt and to be sure your friend can't log in into your account there. This is also a lesson for everyone always keep your private information safe and again don't trust to anyone!

I'm totally confused as why your friend from another part of the globe has you scan passport and credentials to begin with? That's one of the dumbest thing I have heard for such a long time. Hmmm. Very weird. I think the question has been answered already, but I just wanted to reiterate that you shouldn't trust anyone specially everything that involves money. And that is your freaking scan passport dude, worst case scenario is that it can get into the dark web and your personal information can be sold there. Just be very very careful who you trust.

You shouldn't be so full of confidence that nothing can't happen. The confirmation link from your email is a less of what your friend can get from you if he really plans to steal from you. You shouldn't be so quick to trust anyone, especially when it comes to the issue of money. Because money can turn two friends into the biggest foes. I am not saying you should start suspecting your friend but just be careful.

You are in danger. You should use your password and key in others sector in bitcoin because moderators mark you as multiple account. And they give you negative trust.

For me i don’t agree with the idea. Even if i have a big trust with my friend but still in terms of a very confidential matter and document, i should keep it securely without sharing my password and other important keys of my private belongings. If it happened that i was able to share it, i would securely change all passwords to keep it safe again and make sure it will remain confidential within myself.

The question is why do you give away a secret document that you should keep good to your friends?

If you ever give your document to your friends, I am sure you will give email password that can access to your bittrex account will be given to her. If the reason she got acces to your bittrex account because he stole, you should have to change the password from now, before your friends tempt you to give access to your email address.

Your friend is up to something, why she is interested of your account?
Your username and password is very confidential you shouldn't have allow her to get it.
Be sure to change your password immediately before its too late.

All the negativity here. Why did you gave her these details...

I'm not seeing anything bad in it, you are just a good friend!