Rupeezy makes two-factor authentication (2FA) mandatory on every login — a SEBI requirement for every broker, not an optional setting — and automatically emails you when it sees login activity worth flagging, such as a new device or a login from an unusual location.
Is two-factor authentication (2FA) mandatory on Rupeezy?
Yes. Every login to Rupeezy — app, web, Dock, or TV terminal — needs your registered mobile number plus a second factor (SMS/email OTP, or TOTP from an authenticator app). This can't be switched off; it's a SEBI-mandated requirement, not a Rupeezy setting. See How do I set up TOTP for app login? for the stronger, recommended second factor.
How does Rupeezy detect suspicious login activity?
Rupeezy automatically emails you when it sees one of these on your account:
- A login from a new device
- A login from a different city than usual
See Why was a notification sent for logging in on a new device? and Why did I receive an email about a login from a different city? for what each one means and when it's nothing to worry about.
What can I do if I suspect unauthorized access?
If a login-notification email wasn't you, log out of every active session from Account > Manage Logins, then:
- Use Kill Switch to pause trading in a specific segment without affecting the rest of your account. See What is the Kill Switch and how do I use it?.
- Freeze your account to block all trading activity across every segment while you sort it out — call 0755-4268599 or write to stoptrade@rupeezy.in. See How do I freeze or unfreeze my trading account?.
Then contact Rupeezy support.
Things to keep in mind
- Rupeezy support will never ask you for your OTP, TOTP code, or MPIN. Treat any call, message, or email requesting them as phishing, regardless of who it claims to be from.
- The app itself won't run on a rooted (Android) or jailbroken (iOS) device — see Does the Rupeezy app work on rooted or jailbroken devices?.
- These login protections cover account access. For the full customer-side security checklist — device lock, never sharing credentials, and what to do if you lose your authenticator app or phone — see What are the best practices for securing a trading account?.