Securing your Rupeezy account comes down to a few habits: turn on TOTP instead of relying on SMS OTP alone, keep your phone's lock enabled, never share your OTP/TOTP/MPIN with anyone, and act immediately on any login-notification email you don't recognize.
Use TOTP instead of just SMS OTP
TOTP is a 6-digit code from an authenticator app that refreshes every 30 seconds, so it can't be intercepted the way an SMS can be. It's optional but recommended for the extra layer over SMS/email OTP. See How do I set up TOTP for app login?.
Keep your device lock enabled
Rupeezy asks for your phone's own biometric or PIN unlock again whenever you switch away from the app and come back — a check that only works if your phone has a lock set up in the first place. In fact, app login is disabled until you set one up. See also Why does the Rupeezy app log out when I switch to another app?.
Never share your OTP, TOTP code, or MPIN
Your registered mobile number, OTP, TOTP code, and MPIN are all Rupeezy needs to log you in — there's no separate password. Rupeezy support will never ask you for any of these. Treat any call, message, or email asking for them as phishing, regardless of who it claims to be from.
Act on login-notification emails right away
Rupeezy emails you automatically when it sees something worth flagging on your account:
- A login from a new device
- A login from a different city than usual
If any of these weren't you, log out of every active session immediately from Account > Manage Logins, then contact Rupeezy support.
Use Kill Switch or freeze your account if you're concerned
- Kill Switch lets you pause trading in a specific segment (say, NSE F&O) without affecting the rest of your account — useful if you want a break or suspect unusual activity in one segment. See What is the Kill Switch and how do I use it?.
- Freezing your account blocks all trading activity across every segment. If you suspect unauthorized access, this is the fastest way to stop any trade from going through while you sort it out — call 0755-4268599 or write to stoptrade@rupeezy.in. See How do I freeze or unfreeze my trading account?.
Things to keep in mind
- Two-factor authentication can't be switched off — it's a SEBI requirement. What you're choosing between is TOTP vs. SMS/email OTP as your second factor, not whether you use one at all.
- Your Client Code is not a login credential — you never type it to sign in, so sharing it doesn't expose your account the way sharing an OTP or MPIN would. See What is my user ID to log in to Rupeezy's trading platform?.
- If you lose your authenticator app or your registered mobile number, Rupeezy has self-serve recovery paths — see What should I do if I lose access to my TOTP authenticator app? and How do I log in if my mobile is lost or unavailable?.