Account and verification
Sign-up asks for an e-mail and a password. App-based two-factor authentication (2FA) is optional and recommended: with it on, withdrawals are confirmed with the app code; without it, with a code sent to your e-mail. Passkeys (your device's access key) can also be registered under Security.
Verification levels
| Level | What it asks for | Applies to |
|---|---|---|
| No verification | Confirmed e-mail | Crypto deposits and withdrawals, spot, convert, futures, copy, CodeBot — everything except PIX |
| T1 | Full name, CPF and date of birth; ID photo and selfie when requested | PIX deposit and withdrawal. PIX withdrawals up to R$ 5,000 per day |
| T2 | Complete T1 and submit an ID document with photo + selfie | Daily BRL withdrawal limit equivalent to US$ 10,000 |
| T3 | Complete T2; additional source-of-funds review | Daily BRL withdrawal limit equivalent to US$ 50,000 |
Levels are sequential: T2 requires a completed T1, and T3 requires T2. Crypto withdrawals have a single cap, with no verification: US$ 10,000 per day per account (crypto and PIX summed over the last 24 hours).
Account protections
App-based 2FA and passkeys; a confirmation code on every withdrawal (from the app, or by e-mail for those without 2FA); an optional whitelist of withdrawal addresses, with a 24-hour cooldown for new addresses; a daily cap and a velocity limit on withdrawals; active sessions listed under Security, with remote sign-out of the others. Suspect unauthorised access? Change your password and write to security@offcode.pro.