Account & Security

Your account holds real funds. Almost every compromise we see starts with a password that was already in use somewhere else, so the steps below matter more than anything we can do at our end.

Two-factor authentication

Turn on 2FA in your account settings. It is the single most effective step available to you, it takes about a minute, and it stops a stolen password on its own from being enough.

Passwords

Use a password unique to XOXO Gaming. If the same one protects your email or an exchange, a breach anywhere becomes a breach here - and your email is the account that can reset all the others.

Sessions and devices

Active sessions are listed in your settings and can each be revoked. Revoke anything you do not recognise, then change your password and check that your email address and withdrawal addresses are still yours.

Withdrawal addresses

Check the destination address character by character before confirming. Malware that rewrites a pasted address is common, and a confirmed on-chain transfer cannot be reversed by us or by anyone.

What we will never ask

Our staff will never ask for your password, a 2FA code, or a wallet seed phrase, and will never ask you to move funds "for safekeeping". Any message that does is not from us - report it to support.