Skip to main content

Trust & Security

An overview of how Digital Surge protects customer accounts and assets

Written by Taylor

Keeping your account and your crypto secure isn't something we do in isolation. It's a shared effort between you and Digital Surge. Here's a look at what we do on our end, from how we're registered as a business to the systems that protect your account day to day.


Registration

We're a fully registered Australian company, which means we operate under a clear regulatory framework rather than in a grey area.

  • Digital Surge Pty Ltd — Australian company (ACN 620 473 109)

  • AUSTRAC registered (Reg. 100576214) — AML/CTF compliant

  • ASIC-registered company

  • Digital Economy Council of Australia — member

Custody

Your crypto's safety comes down to how it's stored, so we keep the vast majority of customer funds offline in cold storage, well away from any live systems.

  • Wallets managed via Fireblocks MPC

  • Majority of customer crypto held in offline cold storage

  • A smaller hot-wallet balance supports live trading and withdrawals

  • Holdings are reconciled frequently to make sure everything matches up

Account security

We’ve built in several layers of protection to help keep your account and funds secure.

• Two-step verification is required for all withdrawals, using either an SMS code or an authenticator app

• An authenticator app is required for external crypto withdrawals

• New withdrawal addresses require both email confirmation and two-step verification

• You can opt in to an external-transfer restriction for an additional layer of protection

• We’ll email you when your account is accessed from a new device or location, so if you don’t recognise the activity, you can lock your account immediately

Platform security

Behind the scenes, our infrastructure is built and monitored with security as a first priority, not an afterthought.

  • Sensitive data is encrypted, so it can't be read without the correct decryption key

  • Our infrastructure is monitored 24/7

  • We run independent penetration tests and security reviews

  • We maintain a documented incident response plan

  • Access to internal systems is reviewed regularly


Need more help?

If you have any questions, please don’t hesitate to contact our support team.

Did this answer your question?