Two-Factor Authentication (2FA)

What is 2FA?

This is a second verification step added on top of your login and password. Even if someone finds out your password, without access to the second channel (phone, Telegram, or an authenticator app) they won't be able to log in to your account or withdraw funds.

What 2FA methods are available in ZaleyCash?

Three methods to choose from:

1. SMS — the code arrives as a message to your linked phone number.
2. Telegram — the code is sent by the ZaleyCash bot in Telegram.
3. Authenticator app — the code is generated by an app on your phone (Google Authenticator, Ya.Klyuch, or any other TOTP app). It refreshes every 30 seconds.

You can change the method at any time in your personal account.

When does the system ask for a 2FA code?

For sensitive actions: registration, changing your password, phone, or Telegram, adding a wallet in "Finance," and withdrawal requests.

How do I link Telegram for 2FA?

1. Personal account → Settings → Details → Telegram → "Link".
2. Confirm with the SMS code and your current password.
3. Scan the QR code (or follow the link) and press Start in the bot.
4. Return to your personal account and click "I've confirmed".

How do I set up the "Authenticator app"?

You'll need a TOTP app: Google Authenticator, Ya.Klyuch, 1Password, or any other.

1. Personal account → Settings → Details → Authenticator app → "Connect".
2. Confirm with the code from your current 2FA method and your password.
3. Scan the QR code in the authenticator app.
4. Enter the 6-digit code from the app to confirm.

How do I switch from one method to another?

Go to Settings → Two-Factor Authentication, select the desired method, and save. Telegram and the Authenticator app must be linked in advance — otherwise the button will be inactive.

How do I change my phone number?

1. Settings → Details → Phone → "Change".
2. Enter your current password.
3. Confirm with the code from your current 2FA method.
4. Enter the new number and confirm with the code sent to it.

If your old number is no longer accessible but another 2FA method (Telegram or Authenticator app) is active, the confirmation code for the old contact will be sent there instead.

How do I change my Telegram account?

Settings → Details → Telegram → Change. Confirm with the code from your current 2FA method and your password, then link the new Telegram account via QR code.

How do I reconnect or restore the "Authenticator app"?

If you still have access to the old app (changing phones, reinstalling the app) — go to Settings → Details → Authenticator app → "Unlink". Confirm with the code from your current authenticator and your password, then connect the new one. Unlink first, then connect — these are two separate steps.

If you no longer have access (lost your phone, deleted the app) — you won't be able to unlink it yourself. This is a security measure: otherwise, anyone with your password could reset your 2FA. Contact support and be ready to confirm ownership of the account. Once support unlinks it on their end, connect a new authenticator yourself.

Tip: if you're planning to change your phone or reinstall the app — unlink the Authenticator app in your personal account first, then reconnect it. That way you won't need to contact support.

I've lost access to my phone — what do I do?

If Telegram or the Authenticator app is connected — log in to your account and change your number to a new one in Settings → Details. If nothing else is connected — contact support, you'll need to confirm ownership of the account.

I've lost access to my Telegram account — what do I do?

Log in via SMS or a one-time password, switch 2FA to an available method in Settings → Details, then re-link Telegram to your new account. If no other methods are available — contact support.