Why did I receive an unexpected email to confirm a new device?

If you have received an email to confirm a new device, but you have not logged in from a new device, it means that a third party is trying to log in to your account using your login data (and 2FA code). If this happens, you should immediately follow the steps below:

1. Contact Bitvavo
Contact Bitvavo Support immediately by sending an email to support@bitvavo.com. Name the subject "Urgent". Your request will be prioritized, and your account will be (temporarily) blocked as soon as possible.

2. Change your password
Change the password of your Bitvavo account on the web:

1. Login to your Bitvavo account.
2. Click your name at the top right and choose "Security".
3. Click "Change password".
4. Enter your current and desired password.

A detailed explanation can be found here.

3. Enable 2FA (if you do not already have it)
2FA is an additional security layer, in addition to your credentials, for your Bitvavo account. To enable 2FA on the web:

1. Login to your Bitvavo account.
2. Click your name at the top right and choose "Security".
3. Click the option to enable two-factor authentication.
4. Enter your password.
5. Download the Google Authenticator or Authy app.
6. Scan the QR code with the Google Authenticator or Authy app.
7. Enter the code displayed.

A detailed explanation can be found here.

4. Check your IP activity
You can review from which IP addresses an attempt to log in has been made:

1. Login to your Bitvavo account.
2. Click your name at the top right and choose "Security".
3. Click on "Logs" in the top menu.
4. The most recent IP addresses are now displayed. If one of the IP addresses does not look familiar, you are strongly advised not to confirm the email about the new device.

A detailed explanation can be found here.

5. Change the password of your e-mail account
To ensure that a third party can not confirm the email, it is strongly recommended to (temporarily) change your password for your email account.