Multi-factor authentication
Supported methods may include an authenticator or one-time code. Recovery requires identity checks; MFA availability and any mandatory use are confirmed for the account.
Security
Account protection works in layers.
Authentication, encrypted connections, session controls and informed user behaviour work together. No single control removes every risk.
Nine controls
How account security is approached.
Exact feature availability is confirmed during onboarding because it can depend on the responsible platform provider.
Encryption
Connections should use current transport encryption. Storage protections and the systems covered are documented by the responsible service provider.
Fraud and phishing defence
Use only vellermont.com, verify unexpected messages and never share a password, recovery code or remote screen access.
Sign-in notifications
Email or in-platform notices may flag a new device, recovery attempt or unusual activity so you can respond promptly.
Device and session controls
Review active sessions, revoke access you do not recognize and allow inactive sessions to close automatically where supported.
Account recovery
Recovery may require identity verification and support review. Temporary limits can protect the account while ownership is confirmed.
API permissions
Read, trading and withdrawal permissions should be separated. Use the minimum permissions needed and revoke unused keys.
Audit history
Account logs can record sign-ins, connected services and changes to strategies or settings for later review.
Incident support
Contact support immediately to restrict access, preserve relevant information and begin the documented escalation process.
Canadian protection
Security is different from asset coverage.
A secure login does not determine whether an asset is protected if a financial institution or dealer fails.
Cash deposits with a member institution may be eligible for CDIC coverage, subject to its rules. Eligible securities held by a member investment dealer may be covered by CIPF, subject to its limits. Crypto and other digital assets are generally not covered by CDIC or CIPF.
If something looks wrong
Act before investigating deeply.
Stop communication
Do not follow further links or provide additional information.
Protect access
Change credentials from a trusted device and end unfamiliar sessions.
Contact support
Email [email protected] using a known channel.
Keep evidence
Retain messages, addresses and transaction details for review.