How mSamex protects your account — and keeps rewards real
Most security pages talk about what could go wrong. This one is about what we actually run, why it exists, and what it means for you if you use the platform normally.
The problem worth solving
Every exchange that pays real rewards attracts people who would rather farm the rewards than trade. They open accounts in bulk, refer themselves, collect, and leave. It is not a hypothetical — it is the normal cost of running an honest incentive programme.
The money for that comes from somewhere. If it is not stopped, it comes out of the pool that pays genuine referrers, and eventually the programme gets cut for everyone. So we treat anti-abuse as a user-protection feature, not a policing one.
One person, one account
Two independent checks enforce this.
Identity documents are unique. If a passport or ID number has already been used by a different account, the new submission is rejected. Your own re-submissions are fine — people retake photos all the time — but the same document cannot verify two different people.
Accounts created from the same device are linked. The platform recognises when several accounts originate from one browser or phone, independently of the network they connect from. Changing connection does not separate them.
Rewards go to real users
The 25% referral commission activates once your invited friend makes their first deposit of $10 or more. It is a one-time activation per friend — after that, every trade they make pays you automatically, for as long as the programme runs.
You are never asked to deposit anything to unlock your own commission. The requirement sits with the person you invited, and it exists for one reason: an account that never funds itself is not a customer, and paying commission on it takes money from people who referred real traders.
Your login is defended
Repeated failed sign-in attempts are rate-limited per account and per network, so an attacker cannot grind through passwords. Two-factor authentication is available by authenticator app, WhatsApp code, or passkey — and we strongly recommend turning one on. Sessions last 30 days and can be ended from your account at any time.
A risk score, and what it actually means
Every account carries a score from 0 to 100, recalculated continuously from signals like duplicate identity data, device overlap, and unusual reward patterns. The score does not ban anyone. It decides whether a person looks at an account before a large action completes.
If you trade and withdraw normally, you will never see it. If something is held, it is held briefly and a human reviews it — and you can always write to [email protected] and get a straight answer about why.
What this costs you if you are honest
Almost nothing. Verify once, keep one account, turn on 2FA. That is the whole ask. Everything else runs in the background, and the point of it is that the rewards you earn are still there when you go to withdraw them.
Questions people ask
Why do I need to deposit before my referral commission pays?
The 25% commission activates once your invited friend deposits $10 or more. One-time per friend, not per trade. Without it, empty accounts would drain the pool that pays genuine referrers.
Can I have two accounts?
No — one person, one account. Accounts created from the same device are linked, and duplicate identity documents are rejected. Lost access? Contact [email protected] instead of re-registering.
What happens if my account is flagged?
Flagging is not a ban. A raised risk score means a human reviews the account before a large action completes. Genuine users almost never notice.
Do you block anyone by country or IP?
No IP-based geo-blocking. Eligibility follows our Terms of Service and identity verification.
Is my identity document safe?
Documents are encrypted at rest and used only for verification and duplicate detection. They are never shown to other users.