Required Legal Notice: Virtual currencies, real risks. The only guarantee in crypto is risk. Read more

Is this email from Krak?

Last updated: 23 ліпеня 2026 г.

Emails from Krak will always have the @kraken.com or @krak.app domain name at the end of them. This includes sub-domains such as @email.kraken.com or @email.krak.app

BIMI is implemented across all communications from @kraken.com addresses. You will notice our Kraken logo and a blue checkmark displayed next to verified emails.

BIMI


What if I don't see a blue checkmark?

• Verify the Sender's Address: Ensure the email is from a legitimate @kraken.com address. Be cautious of lookalike domains or subtle misspellings (e.g., @krakrn.com).

• Check Your Email Client: Not all email clients support BIMI or display blue checkmarks. For example, some versions of email apps may not yet show this feature. Gmail and Outlook are among the clients that support BIMI.

If you receive a Krak Support or marketing email from any other address besides the ones listed above, do not click on any links that may be provided, as they may not be from Kraken or Krak, and should not be trusted.

If you are still uncertain whether the email you received is from Krak or Kraken, fill out this form to let us know. Please do not delete the email until you hear back from us.

Important

If an email comes from a domain that differs by only one or two letters, such as @Krakem.com, this is still a cause for concern and should be reported to Krak Support.

• Provide your username. Keep your username secret!

• Provide your passwords. Never give out your passwords to anyone who asks.

• Remove your 2FA methods or Master Key.

• Give us access to your devices via remote desktop access software like Teamviewer or AnyDesk.

Phishing occurs when you receive an unsolicited email or text message on your phone that asks you to click a link, or sign-in to your account. This could be a scammer who is impersonating Krak, and the link will lead to a website that looks almost identical to the actual Krak website.

These websites can be malicious. They will ask you to enter your username, password, and sign-in 2FA of your Krak account. Or, they may ask you to download a file. These files may look harmless, but can be loaded with malware, or be used to gain remote control of your device.

• Use PGP email encryption (GP-encryption-) to verify the legitimacy of our emails.

• Set up an email account that you only use for Krak.

• Enable multiple Two-Factor Authentication methods, including phishing-resistant Passkeys.

• When navigating to, or using Krak, always ensure the URL in your browser is https://krak.app/

Bookmark krak.app in your browser, and only use that to navigate to Krak.

Never use search engines, emails, social media, or anything else besides your bookmark to find the Krak website.

I gave my sign-in credentials to a suspicious website (or person), what should I do?

  • •

    Scan all devices for malware.

  • •

    Remove all unofficial Kraken apps from your mobile devices.

  • •

    If you did download suspicious apps or files to your device, backup any important data and reset all your devices to factory settings.

  • •

    Reset the password of your email account.

  • •

    Update or add Two-Factor Authentication (2FA) to your email account.

Once you have completed the security steps above, please contact our support team as soon as possible to begin investigation. Be sure to include details about your situation, and the security steps you've taken above.

I received a legitimate Krak email, although I didn't perform this action, what should I do?

If you do not have a Krak account, but received an email that you've created one, your email account may be at risk.

  1. 1

    Sign into your Krak account.

  2. 2

    Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email.

    If there are any suspicious devices or sessions, close them and immediately contact our support team.

  3. 3

    Ensure your Krak account and email account are secured to your satisfaction.

If you've received an email regarding a password reset on your account, but you did not initiate this reset, contact our support team immediately.

If you've received an email regarding a new device on your account, but you were not in the process of adding a new device, contact our support team immediately.

These emails contain the model, location, and IP address of the new device being used to sign-in.

If you've received an email to confirm a new withdrawal address, but you didn't add a new withdrawal address to your account, contact our support team immediately.

New withdrawal address emails contain the location and IP address of the device used to add the new address.

If you didn’t create a ticket request via our forms or emails, it means someone else used your email address to do so. You can safely delete the message.

Please remember that Krak Support will never contact you via text, phone, or email to request a withdrawal from your account. If you ever receive such a request, it is a scam.

To double check your ticket requests:

  1. 1

    Log in to your Krak account.

  2. 2

    Check your active sessions and devices for suspicious activity. If everything is normal, you may ignore the email.

    If there are any suspicious devices or sessions, close them and immediately contact our support team.

  3. 3

    Ensure your Krak account and email account are secured to your satisfaction.

Still need help?

Contact support via the Krak app on your phone.

Get help in the app

Download the app