Why you confirm with a password or code before money moves

When you are asked

• Sending a payout.
• Adding a new payout account.
• Showing a card's full number and CVC.
• A transfer between your accounts, which is not available yet.

You are not asked for this when you add funds, issue a card, or freeze or unfreeze a card.

Which proof you are asked for

Your account decides this. You cannot choose.

• Two-step sign-in has been on for at least 7 days: you enter a current 6-digit code. A password alone is not accepted.
• Two-step sign-in was turned on less than 7 days ago, or is off, and you have a password: you enter your password. A short human check runs with it.
• You have no password and no authenticator that is at least 7 days old: you cannot continue yet.

Why a new authenticator asks for your password

A newly added authenticator does not yet count as proof that you are the owner. For its first 7 days, your password is the proof. This also gives you time to notice an authenticator you did not add.

If you are told to set a password

You see To continue, set a password or turn on two-step sign-in in your account settings. Press Open account settings and set a password in the Password row. If you only turn on two-step sign-in and have no password, the code is accepted once the authenticator is at least 7 days old.

Messages you may see

• We could not confirm it is you. The password or code was not accepted. Try again.
• Too many attempts. Wait a few minutes and try again.
• The human check did not go through. Reload the page and try again.