Security

Security is a process, not a badge

ZARXE is engineered so that no single mistake — yours or ours — can quietly drain funds. Here is exactly what protects your money and your data.

Escrow custody

USDT in an open trade is held by the platform, not by the counterparty. Balances are tracked per user and locked amounts cannot be spent, re-listed or withdrawn.

One-time codes on release

Releasing escrow requires an explicit confirmation that the rand was received plus a one-time code delivered to the account's email address.

Account protection

Sign in with email and password, Google or Apple. Passwords are checked against known breach databases and weak or leaked passwords are rejected.

Least-privilege data access

Every table is protected by row-level access policies. Users can only read their own records; counterparty details are limited to display name, rating and verification status.

PII is not broadcast

Phone numbers and identity documents are never exposed to other traders. Verification documents live in a private bucket readable only by the owner and reviewers.

On-chain hygiene

Deposit addresses are derived per user and swept into monitored hot wallets. Withdrawal activity is logged and unusual patterns are reviewed before broadcast.

Keeping your own account safe

  • • Use a unique password and keep access to your email secure — release codes go there.
  • • Never release USDT because someone shows you a screenshot or SMS. Check your bank balance first.
  • • Never move a trade to WhatsApp, Telegram or a phone call. Keep everything in the trade room.
  • • ZARXE staff will never ask for your password, seed phrase or a one-time code.

Reporting a vulnerability

If you believe you have found a security issue, report it privately through our support centre with steps to reproduce. Please do not test against other users' accounts or funds.

Trade on rails you can inspect

Open a free account and see the protections in action.