Security FAQs

We may use your information to make further enquiries about you, including checks to combat fraud. We do not sell your personal information to any third parties for marketing purposes. For further information, please read our privacy and security policy, which explains in more detail how we deal with the personal information you provide us.

You may receive an alert if the password you use to access your account is found in a data leak. Your password could appear in a data leak if a company with which you have an online account unintentionally releases or exposes customer information, perhaps due to human error or a hacking incident. If your password appears in a data leak, criminals may be able to gain access to the accounts where you use that password.

If we inform you that your password may have been compromised, please change your password immediately.

If you receive such a message, it does not indicate that there has been a breach of CMC Markets’ systems or data. Rather, it is intended to help you protect your account from unauthorised access.

We store your password and other personal details securely, using industry-strength data protection and encryption technology. Additionally, we recommend that you use a strong, hard-to-guess password, create a unique password for your CMC Markets account, avoid reusing passwords across multiple websites, and update your password regularly.

Two-Factor Authentication (2FA) adds an extra security checkpoint to your login process. Instead of just entering your password, you'll also need to verify your identity using: 

• Something you know (your password) 
• Something you have (your phone for SMS codes or an authenticator app) 

This means that even if someone steals your password, they still can't access your account without your phone. 

You can choose to receive OTPs either through a mobile app, which will typically involve scanning a QR code on screen, or by SMS. In the unlikely event that either method should fail, the other will be available as an alternative. Should both methods fail, or be unavailable, for instance if you have difficulty receiving messages while overseas, we can provide OTPs over the phone. For more information on how to set up 2FA, please visit our learn section.

Once you've switched on 2FA for your account, it will become a mandatory step for withdrawals. You can also enable 2FA for the login process, which will provide extra security each time you access your account through our online trading platform and mobile app.

Yes. In line with regulatory guidelines, 2FA is required for all users and becomes mandatory from 12 September 2025 to help protect accounts from unauthorised access.

1. Enter your email and password to login to CMC Markets as usual 
2. You will immediately be prompted to set-up 2FA 
3. Choose between using an Authenticator App or SMS 2FA

4a. Authenticator App: 

- Select the 'Mobile App' button 
- Select 'Manual Entry'
- Enter your account email address followed by the Key provided by the Authenticator  
- You’ll be sent a 6-digit verification code, enter this code and press 'verify'
- Either select 'Text Message' to set up SMS verification or 'Start Trading' to get onto the platform 

4b. Text Message (SMS):

- Select the 'Text Message (SMS)' button 
- Enter your phone number and select 'Send SMS Message'
- You will receive a 6-digit code, enter this and select 'verify'
- Either select 'Mobile App' to set up Authenticator verification or 'Start Trading' to get onto the platform 

Need assistance? Contact us at support@cmcmarkets.com.sg or 1800 559 6000.

No. 2FA is mandatory for account access. We recommend setting it up as soon as possible to ensure uninterrupted access to your account.

We use multiple layers of protection, including: 

- Real-time notifications for trades and account changes
- Strong password requirements for better login security 
- Ongoing security education to help you stay safe online 
- Advanced monitoring to detect suspicious activity 

Your investment security is our priority, and 2FA is an important part of keeping your account safe.