Security FAQs

We may use your information to make further enquiries about you, including checks to combat fraud. We do not sell your personal information to any third parties for marketing purposes. For further information, please read our privacy and security policy, which explains in more detail how we deal with the personal information you provide us.

Two-factor authentication, or 2FA, will be increasingly familiar to those who use online banking or make payments online. It involves receiving a one-time password (OTP) from your bank, and entering that OTP when prompted, when you log into your account or making an online payment.

You can choose to receive OTPs either through a mobile app, which will typically involve scanning a QR code on screen, or by SMS. In the unlikely event that either method should fail, the other will be available as an alternative. Should both methods fail, or be unavailable, for instance if you have difficulty receiving messages while overseas, we can provide OTPs over the phone. For more information on how to set up 2FA, please visit our learn section.

Once you've switched on 2FA for your account, it will become a mandatory step for withdrawals. You can also enable 2FA for the login process, which will provide extra security each time you access your account through our online trading platform and mobile app.

You may receive an alert if the password you use to access your account is found in a data leak. Your password could appear in a data leak if a company with which you have an online account unintentionally releases or exposes customer information, perhaps due to human error or a hacking incident. If your password appears in a data leak, criminals may be able to gain access to the accounts where you use that password.

If we inform you that your password may have been compromised, please change your password immediately.

If you receive such a message, it does not indicate that there has been a breach of CMC Markets’ systems or data. Rather, it is intended to help you protect your account from unauthorised access.

We store your password and other personal details securely, using industry-strength data protection and encryption technology. Additionally, we recommend that you use a strong, hard-to-guess password, create a unique password for your CMC Markets account, avoid reusing passwords across multiple websites, and update your password regularly.