Skip to content
Log in Open account

How to spot a fake JAFX website, email or message

Updated 13 November 2026

JAFX uses only three web addresses: jafx.com, app.jafx.com and terminal.jafx.com. Our system emails come from support@jafx.com. We never ask for your passwords, a 2FA code or a one-time code. If a site or message does not match what is on this page, do not trust it. Contact us through live chat or email.

The only JAFX addresses: jafx.com, app.jafx.com, terminal.jafx.com

Address What it is
jafx.com The public website, including this help centre (jafx.com/help) and the developer documentation (jafx.com/developers/)
app.jafx.com The client portal, where you sign up, verify, deposit, withdraw and manage your trading accounts
terminal.jafx.com The JAFX Terminal, where you trade
  • Before you sign in, check the address bar. It must show one of these addresses exactly.
  • The JAFX Terminal is the only trading platform JAFX offers. It runs in your browser. There is no app-store app. A download or platform login offered "for JAFX" anywhere else is not from us.
  • If you are not sure about a link, do not click it. Type app.jafx.com into your browser yourself and sign in there.

Genuine emails come from support@jafx.com

  • Our system emails come from JAFX Support <support@jafx.com>. A reply goes to the same address.
  • Links in our emails open pages on addresses that end in jafx.com, such as app.jafx.com.
  • We write to the email address registered on your account.
  • The only text message (SMS) we send is the code you ask for when you verify your phone number with Send code.
  • We never send a sign-in code by email or SMS. If two-factor authentication (2FA) is on, your sign-in code comes only from your authenticator app.

Did you get a password reset email you didn't ask for? Do not use its link. See I got a JAFX password reset email I didn't ask for.

For a full list of what we send, see Emails and text messages JAFX sends you.

What we never ask for

Our staff never ask you for:

  • your portal password
  • your trading account password
  • a 2FA code from your authenticator app
  • any one-time code
  • your Trading API key

"JAFX never asks for your password or your API key by email, chat or phone."

The Support PIN in Settings is the only code an agent may ask for. They ask for it only when you are talking to them live and are not signed in to the portal. We never ask for it by email or in live chat.

A new trading account password is only ever sent to you by email, when you open the account or select Reset pwd. No one at JAFX gives out a trading password in a chat, a ticket or a phone call, or asks you for it.

JAFX does not give advice, make recommendations or manage accounts on behalf of clients. Anyone who offers to trade your JAFX account for you, or asks for your login to do so, is not JAFX.

JAFX account managers may sometimes phone clients. Even on a call, we never ask for your passwords, a 2FA code, a one-time code or your API key. To stop calls, see How to stop marketing emails and phone calls from JAFX.

We don't contact clients on WhatsApp or Telegram

JAFX staff never use WhatsApp or Telegram with clients. Any message on those apps that claims to be from JAFX support is not from us.

Our support is live chat and email only:

  • live chat: the Chat button in the client portal. You talk to a real person.
  • email: support@jafx.com

Deposit addresses come only from your own Deposit page

  • Take a deposit address only from the Deposit page of your own client portal at app.jafx.com. After Submit deposit, the address appears in the Send your payment panel.
  • Each deposit address is for one deposit. Make a new deposit request, and use the new address, every time you deposit.
  • Never send money to an address that someone gives you in an email, a chat, a social media message or on another website.
  • A payment on a blockchain cannot be reversed. Check where you are sending money before you confirm it in your wallet.

See Deposit methods, minimum deposit and fees.

If you think you used a fake site or sent details to a scammer

  1. Contact us straight away. Use live chat, or email support@jafx.com from your registered email address. Tell us what happened and which site or message was involved. If you sent money, give us the transaction ID.
  2. Change your portal password. Go to Settings → Security → Change password → Email me a reset link. If you can't sign in, use Forgot password? on the sign-in page.
  3. Reset your trading account passwords. On each account in Trading Accounts, select Reset pwd. The new password is emailed to you.
  4. Turn on 2FA. Go to Settings → Security → Enable 2FA. See Two-factor authentication (2FA): turning it on, signing in with it and turning it off.
  5. Check the Developers page in the JAFX Terminal, even if you don't use the Trading API. Anyone who has your trading account password can create an API key or connect an AI app to your account. Select Revoke on every key you don't recognise or may have shared. Under Connected apps on the same page, select Disconnect on every AI app you don't recognise. See API keys in the JAFX Terminal: create, roll and revoke.
  6. Change the password of your email account if you typed it anywhere you don't trust.

For more help, see I was scammed by a fake JAFX website or someone pretending to be JAFX and What to do if your JAFX account has been hacked.

We are available 24/7 via live chat or email.

Was this article helpful?

Can't find your answer?

Our team is here 24/7, by live chat in your client area and by email at support@jafx.com.

Contact us