Question 1

How do I disable 2FA?

Accepted Answer

Disabling 2FA is a deliberate step that requires two confirmations: your password and the current authenticator code. The platform intentionally avoids one-click disablement so that an attacker who briefly gets hold of an unlocked device can't quickly turn off the second line of defense.
Steps:

Open Dashboard → Security.
In the "Two-factor authentication" block click "Disable 2FA".
In the dialog that appears, enter your current account password.
In the adjacent field, enter the 6-digit code from your authenticator (the one shown in the app right now — it refreshes every 30 seconds).
Click "Confirm disable". 2FA turns off immediately and the Security card status changes.

Important consequences:

After disabling, sign-in is protected by password only. If someone learns your password, there are no additional barriers.
Withdrawal confirmation will also no longer require a code. This removes one of the key obstacles to moving crypto out if the account is compromised.
The action is reversible: you can re-enable 2FA the same way you did the first time. See How to enable 2FA.

When disabling makes sense:

Replacing the phone and reinstalling the authenticator (although importing the secret key into the new device without disabling is easier).
Handing the account over to another responsible person (poor practice — create a separate account instead).

When disabling is almost always a mistake:

"To sign in faster" — seconds saved, security lost. Not recommended.
"To withdraw a large amount without a code" — this means you lost access to the authenticator. The right path is recovery, see I lost access to my 2FA.

Question 2

I lost access to my 2FA — what do I do?

Accepted Answer

First, check whether a working code generator still exists somewhere. This is the fastest path — no support contact needed.

Authenticator cloud sync. Authy, Microsoft Authenticator (if backup was enabled), 1Password TOTP — install the app on a new device, sign into your cloud account, your keys reappear automatically.
A second device that already had the same 2FA. Some users scan the QR on two devices during initial setup — phone + tablet. If that's you, grab the code from there.
A paper artifact (printed QR code or text key in a safe). If you saved one, enter the key manually in a new authenticator. Right after recovering access, set up cloud sync or a second device so this doesn't happen again.

If any of these worked, sign in, optionally disable 2FA, and re-enable on the new device with proper insurance this time.
If the key is gone
You can't recover 2FA yourself — this is intentional, so an attacker who learned your password can't bypass the second factor by simply asking "please restore access". Contact support:

Telegram: @BitMomentSupportBot
Email: support@bitmoment.pro

What you'll need to prepare — support may ask for part or all of this package depending on your KYC level and trading history:

The email tied to the account — identification is impossible without it.
A photo of your passport (main page) — basic identity proof. If you passed KYC L2, support will compare it with the document already on file.
A video selfie holding a piece of paper with today's date and the text "No 2FA" handwritten on it. Your face and the text must both be clearly in frame, with no editors or filters.
Answers to control questions about the account — for example, date of birth, your user ID (visible in the dashboard), approximate amount of the last deposit or withdrawal, nickname of the counterparty in the last completed trade.

The review typically takes from several hours to several business days, depending on moderation load and how clean each step is (clear photos, accurate answers). On success, 2FA is disabled, you can sign in with your password and re-enable 2FA on the new device — this time set up an authenticator with cloud sync, or scan the QR on two devices at once, so losing one doesn't repeat this story.
If you didn't pass KYC L2 and have no trading history, recovery may be impossible. Create a new account and set up 2FA with redundancy from day one. See: How to enable and safely store 2FA.

Question 3

Can I use BitMoment through a VPN?

Accepted Answer

Yes, VPNs are allowed — BitMoment does not block users by geolocation and does not treat a VPN connection as a problem in itself.
Why a VPN can help:

Encrypts traffic from your device to the exit node — particularly important on public networks (cafes, hotels, airports), where plain HTTPS doesn't protect against some router-level attacks.
Hides your real IP from third parties — reduces attack surface and behavioral targeting.
Works more reliably on flaky or filtering ISPs.

Setup recommendations:

Use paid VPNs with their own server infrastructure and a reputation — free providers often sell traffic or inject ads.
Enable the kill-switch — if the VPN drops, the internet shuts off completely, with no "leaks" to the public channel.
Choose reputable VPN servers — connections from addresses widely used for abuse may be treated as less trusted (this alone won't get you blocked).

When to be careful:

Don't change IP abruptly during an active trade. If you opened a trade in Moscow via a Russian VPN and 5 minutes later appear from a German server, the system may ask you to re-confirm sign-in (email code or 2FA). This is normal anti-fraud, but during a payment or release confirmation it's especially inconvenient.
Don't switch VPN off right before an operation — a sharp shift from a foreign IP to your real one is the same kind of signal as the reverse.
A noticeable change in your sign-in conditions may trigger a 2FA or email-code re-confirmation. This is protection for you, not punishment.

If you have questions, contact support: @BitMomentSupportBot or support@bitmoment.pro.

Question 4

How do I delete my account?

Accepted Answer

There is no "Delete account" button in the BitMoment dashboard — by design, not by omission. Reasons:

Protection from accidental or impulse deletion (deleted accounts cannot be restored).
AML regulation requirements around retaining operational history — even inactive accounts stay in our internal logs in anonymized form for the prescribed retention period.
Protection against account-takeover scenarios where an attacker first changes the password and then tries to delete the account to hide tracks.

What to do before contacting support:

Withdraw all funds from all crypto balances to an external wallet. After closure, fund returns are only possible manually through support and may take time.
Complete or cancel all active trades and ads — closing an account with hanging trades blocks counterparties.
Export your operation history if you need it for accounting — via Transactions → Export.

How to contact support:

Telegram: @BitMomentSupportBot
Email: support@bitmoment.pro

In your message, provide the email tied to the account and the reason for closure (optional, but helps us improve). Support may ask for identity verification similar to 2FA recovery (passport photo, control questions), especially if there's still anything on the balance.
What happens after deletion:

Sign-in is no longer possible.
The nickname, avatar and public statistics are removed from the trader list.
Internal data (operations history, KYC documents, AML logs) is retained in anonymized form to comply with regulatory requirements and is not used for marketing.
Accounts cannot be restored after deletion — you'd have to register a new one with a different email and pass verification again.

Question 5

How do I enable two-factor authentication (2FA)?

Accepted Answer

Open Dashboard → Security.
Find the "Two-factor authentication (2FA)" block and click "Enable".
A QR code and a text secret key beneath it will appear on screen. This is the unique fingerprint of your user-device pair.
Open an authenticator app. Any TOTP-compatible app works: Google Authenticator, Authy, Microsoft Authenticator, 1Password.
In the app, choose "Add account" → "Scan QR code" and point the camera at the screen. If the camera doesn't work, choose "Enter key manually" and paste the text key.
The app immediately shows a 6-digit code that refreshes every 30 seconds. Enter it in the confirmation field on the site.
Once the code checks out, 2FA is on — the Security card status changes to "2FA enabled".

From now on, every sign-in after the password will require a 6-digit code, and the code will also be required when confirming withdrawals — the second line of defense for your funds.
How to protect against losing access
If you lose the phone with the authenticator, the only recovery path is via support (see I lost access to my 2FA). The right way to insure yourself — before anything breaks:

An authenticator with cloud sync. Authy, Microsoft Authenticator (with backup enabled), and 1Password TOTP sync your keys across devices — after reinstalling the app, codes come back. This is the smoothest scenario.
Parallel registration on a second device. At the "scan QR" step, scan the same QR code on two devices — for example, your main phone and a tablet. Losing one doesn't lock you out.
A paper artifact as a last resort. Print the QR code or text key and put it in a physical safe separately from your BitMoment login/password. This is a recovery channel you touch once every few years.

⚠️ Don't store the TOTP key in the same password manager that holds your BitMoment login — it formally collapses "two factors" into one: compromising the vault = both the password and the second factor at once.
Detailed guide with screenshots: How to enable and safely store 2FA.

Question 6

How do I sign up on BitMoment?

Accepted Answer

Creating an account takes 2-3 minutes on the sign-up page. Two options are available.
Option 1. Email and password.

Open the sign-up form.
Enter a valid email — it will receive the confirmation letter and all future notifications (new-device sign-ins, balance operations, disputes).
Choose a password: at least 8 characters, with lower and upper case letters, a digit and a special character.
Tick the box to accept the Terms of Use and Privacy Policy — the button stays disabled without it.
Click "Sign up". For security reasons, the page always shows the same "Check your email" message — even if no account with that email exists (anti-enumeration defense).
Open the email and click the confirmation link. You can sign in after that.

Option 2. Google OAuth.
The "Sign in with Google" button next to the form is the fastest path. Your email is already verified by Google, so the confirmation step is skipped. If your Google account itself has no verified email, the platform will refuse — this is an AML compliance requirement.
After your first sign-in, the platform auto-generates a nickname like BraveLion2841 (adjective + animal + 4 digits) and creates wallets for the supported cryptocurrencies for you. You can change the nickname in Settings before your first trade — after the first completed trade it locks as your reputation identifier.
Payment details, ID and phone number are not required at sign-up. They'll be needed later on the Verification page when you want to trade. See also: What you need to trade.
Step-by-step guide with screenshots: How to register and sign in.

Question 7

What's required to start trading on BitMoment?

Accepted Answer

Access to trading requires a two-step verification (KYC):

KYC 1 — phone verification. Enter your phone in international format and confirm it following the on-screen instructions.
KYC 2 — identity verification. Upload a passport photo (main spread) and a selfie holding the document. Submissions go to a moderation queue — review typically takes a few hours.

Trading becomes available once KYC 2 is approved. You can then open trades on other people's ads and publish your own.
Why these steps
Two-stage verification is the foundation of safety in P2P trading. It cuts both ways:

Protects the seller. The buyer in a trade is backed by a real passport and phone — reducing the risk that they "disappear" with the crypto or try to dispute the transfer after the fact.
Protects the buyer. The seller is identified the same way. If a dispute occurs, the platform has a complete identity trail — cases are resolved quickly and predictably.
Makes life harder for scammers. An account tied to a real document can't be thrown away after complaints and re-created under a new name. Every violation stays on file and affects your ability to trade.

What's available without verification

Browse the market, ads, and trader profiles.
Deposit and withdraw your own crypto.
Read the help center and documents.

You cannot open a trade or create an ad without KYC 2.
Verification steps
Open Dashboard → Verification. The "Level 1: Phone" block appears first — complete it. After that, the "Level 2: Documents" block unlocks — upload your passport and selfie.
One phone = one account. The same number can't be used on multiple accounts — this is part of the platform's defence against multi-accounting and scams.
Full guide: Verification — KYC levels and how to pass them.

Account

Useful guides in this category

How to enable and safely store 2FA

Sign-up and first login

How to use BitMoment — complete guide

Verification — KYC levels and how to pass them

Still have questions?