SECURITY

What is 2FA

How to enable 2FA

How to change your 2FA settings

How to disable 2FA

What is 2FA

EXANTE is committed to protecting our clients’ assets. That’s why we use two-factor authentication (2FA) for both the Client’s Area and trading platforms.

EXANTE supports the following types of verification:

• SMS
• Email
• One-time password application

Note: EXANTE recommends that clients use Google Authenticator. Google Authenticator is a mobile application that generates 2-step verification codes on your phone. You can read more about this application on the official page of the Google Help Center.

2FA – Google Authenticator

How to enable 2FA

1.  Go to Settings > Security > 2-Step Authentication in your Client's Area.  

Client’s Area – Settings – Security

2. Choose the verification type and click Activate.

Client’s Area – 2-Factor Authentication

3. In a new window, activate the selected type by entering a temporary verification code in the field below.

Client’s Area – Activation window

4. The enabled verification type is now highlighted in green.

Client’s Area – Activated verification type

5. Congratulations! Now, your account is secured with two-factor authentication. 

Note: If you choose SMS as a verification type, you should verify your identity. If you face difficulties receiving an SMS code, activate another 2-factor authentication type in your Client’s Area and receive the code via the chosen source.

How to change your 2FA settings

Scenario 1. 2FA is enabled for the Client’s Area only

If you visit the Security page of the Client’s Area, you will see that the activated verification type is highlighted in green. If you wish to enable 2FA for both Client’s Area and trading terminals, you will need to deactivate the current 2FA method and activate the desired one.

Client’s Area – 2-Factor Authentication – Deactivation window

This will ensure that 2FA works for both your Client’s Area and trading terminals.

Scenario 2. If 2FA is enabled for trading terminals only

You will see that all 2FA types are disabled in your Client’s Area. However, 2FA will still work for your trading terminals. If you wish to enable 2FA for both the Client’s Area and trading terminals, you will need to activate the desired 2FA method for both.

Scenario 3. If 2FA is different for the Client’s Area and trading terminals

You will see the active 2FA type in the interface. To set a unified 2FA method for both the Client’s Area and trading platforms, you will need to deactivate the current type and activate the desired one. This will apply the chosen 2FA method to both your Client’s Area and trading platforms.

How to disable 2FA 

You always have the option to disable 2FA in your Client’s Area Settings. Moreover, if you still experience any issues, please contact us at support@exante.eu for help and guidance.

Procedure

When an investment firm goes out of business, as a common practice, once the liquidation process begins, the court should appoint an administrator for the investment firm. The firm’s office then should be closed and all operations terminated, while the administrator and the firm scrutinise all documents, records, and books. The respective competent supervisory authority shall monitor the process. In case the records of the firm are found to be accurate, provision should be made to transfer the client accounts to another brokerage firm by supervisory authority and the administrator. The customers shall be notified of the transfer of accounts; they shall be able to continue cooperation with the new assigned broker or choose another service provider on their own choice. The client may be asked to file a claim with the appointed administrator on repayment of the assets.

In certain circumstances, where the client falls under the protection of any investor compensation fund, the procedure of a direct repayment of client assets may take effect within the limits set by the respective investor compensation fund. This is an out-of-court process.

Exante invites you to periodically check EXANTE's legal status and licenses in the state registries, and maintain organised records of your assets and accounts by keeping either a hard copy or electronic records of holdings, account statements and trade confirmations.

Measures taken by EXANTE

EXANTE is a fully licensed investment company. As an EU company, we comply with MiFID II (Markets in Financial Instruments Directive). 

In line with MIFID II requirements, we separate clients’ and Company's assets. Client's assets are held on segregated accounts at our trusted custodians (more than 25 major banks) and EXANTE has no access to these assets. 

Please follow the link to restore your password if you have lost it, or if you want to set another one.

Phishing is an identity theft technique that utilises fraudulent websites or messages disguised as those of legitimate entities.

At EXANTE, we employ stringent security measures and consistently improve our technology to protect our clients from external fraud. We implement administrative and technology measures to safeguard client data processed through our information systems.

We also recommend our clients to be cautious and responsible, and evaluate critically any requests to reveal personal information to third parties.

To provide the most secure and transparent services to our clients, we store all personal data on EXANTE’s internal servers and do not share it with any third parties. Our company’s procedures and policies aim to protect the confidentiality and security of your information, including nonpublic personal information.

More on Data security at EXANTE can be found on GDPR Compliance.

EXANTE has developed the trading platform without using third-party solutions. We are committed to its fast and reliable performance and the safekeeping of clients’ personal data.

If you have any worries regarding the safety of your personal data, feel free to report the issue to your Account manager.

If you decide to cease your cooperation with EXANTE, you have the right to request complete erasure of your personal data. 

As a regulated financial institution, we are under regulatory obligations to keep your data for a minimum of six years for anti-money laundering and counter-terrorism purposes. These retention requirements supersede any right to erasure requests under applicable data protection laws (such as GDPR).

We cannot therefore erase your data in relation to your EXANTE account until after this time period. However, we can assure you that your data will be held safely and securely whilst under our supervision.

After the termination of the holding period required by the regulators, you may contact your Account Manager or Support at support@exante.eu to request the erasure of your personal data.

EXANTE’s priority is to guarantee transparency and reliability for our clients worldwide. EXANTE is an EU-regulated investment firm, complying with the MiFID II Directive and meeting all associated legal requirements, protocols and policies.

EXANTE works with major European banks. When it comes to clearing, we rely on Tier 1 liquidity providers.

We also have multiple counterparties for each financial instrument to ensure flawless operations. As for commodities trading, these deals are executed directly at the corresponding exchanges.

EXANTE employs segregated accounts to ensure maximum asset protection and risk mitigation. Check out the exhaustive list of licences acquired by EXANTE. 

As a financial institution, we are obliged under the Anti-Money Laundering and Counter-Terrorism Financing regulations to retain information about you and your EXANTE transactions for a period of six years.

You may request erasure of your data after the termination of the holding period required by the regulators.