Built on defense-in-depth.
Every layer of your RCF account — from signup to live trading — is hardened with email OTP, secure sessions, and strict Deriv API scope controls.
Email OTP Verification
Every signup, login, and password reset is gated by a 6-digit one-time code sent to your verified inbox. Codes expire in 10 minutes and are single-use.
Secure Login Flow
Better Auth sessions with httpOnly cookies, SameSite protection, and 30-day rolling expiry. Sessions are revocable from your dashboard.
Deriv API Protection
Your Deriv token is encrypted at rest and never displayed back to you. We only need Trade scope (Account management recommended) — never full wallet or payment access.
Account Protection
Suspend, block, or reactivate states are enforced server-side. Profile completion (country + phone) gates trading actions on your account.
OTP Verification, end-to-end
Signup
Step 1- 1Register with email + password
- 2Receive 6-digit OTP via email (10 min)
- 3Verify code to activate your account
Login
Step 2- 1Enter email + password
- 2Receive OTP to your verified email
- 3Confirm OTP to start your session
Password Reset
Step 3- 1Request reset by email
- 2Verify OTP to prove ownership
- 3Set a new password (min 8 chars)
How to Stay Safe
A short checklist that prevents 99% of account compromises.
Phishing Prevention
RCF will NEVER ask for your password, OTP code, or Deriv token via email, phone, Telegram, or any chat. We only ask for them inside the login modal on rcfcopytrading.com.
Strong, Unique Password
Use a password manager. Minimum 8 characters. Don't reuse passwords across exchanges, wallets, or brokers.
Verify the Sender
All OTPs originate from zebulon@rcfcopytrading.com (sender name: RcfCopyTrading). If you receive an OTP you didn't request, ignore it and report it from your dashboard.
Minimal Deriv Scope
When creating your Deriv token at app.deriv.com, enable Trade (required) and Account management (recommended). Skip Application insights. You can revoke the token in Deriv anytime.
What you'll see in your inbox
Sample of a real RCF verification email.
From
RcfCopyTrading <zebulon@rcfcopytrading.com>
Verify your email
Enter this code to complete your account setup:
123 456
Expires in 10 minutes. If you didn't request this, ignore the message.
Ready to trade securely?
Activate your account in under 60 seconds.