How Do You Remove Your Phone Number from a Crypto Exchange Account?
You remove your phone number from a crypto exchange account by changing your security settings to replace SMS-based two-factor authentication with an authenticator app or hardware security key, then deleting the phone number from your contact and recovery options. This is the single most effective step you can take to eliminate SIM swap risk on that account.
Why removing your phone number matters
A SIM swap attack works because your phone number controls access to your exchange account. If an attacker convinces your carrier to transfer your number to their SIM, any SMS-based 2FA code or password reset link goes to them. Once they have that, they can log in, withdraw funds, and lock you out.
Removing your phone number means there is nothing for an attacker to intercept. Even if they steal your number, they get nothing from the exchange.
Step-by-Step: removing your phone number
The exact menu labels vary by exchange, but the procedure is the same everywhere.
1. Log In and Go to Security Settings
Look for a section labeled Security, Account Security, or Two-Factor Authentication. This is usually under your profile icon or account settings.
2. disable sms-based two-factor authentication
If SMS 2FA is currently enabled, you must turn it off first. Most exchanges require you to confirm this change with your existing 2FA method - either an authenticator app code or a hardware key.
What to expect: The exchange may send a warning that disabling SMS reduces your account security if you do not replace it. That warning is correct only if you leave 2FA off entirely.
3. Replace SMS with an Authenticator App or Hardware Key
After disabling SMS, enable a more secure 2FA method:
- Authenticator app (Google Authenticator, Authy, Microsoft Authenticator): Scan a QR code and enter the six-digit code it generates. Keep the backup codes the exchange gives you - store them somewhere safe, offline.
- Hardware security key (YubiKey, Google Titan): Insert the key and tap it when prompted. This is the most resistant to phishing and SIM swap attacks.
Some exchanges let you have multiple 2FA methods. If so, add at least two (for example, two authenticator app entries or one app plus one hardware key) so you have a backup if you lose your phone.
4. Delete Your Phone Number from Account Recovery Options
Disabling SMS 2FA does not always remove your phone number from the account. Many exchanges keep it on file as a recovery method - a way to reset your password or regain access if you lose your 2FA device.
Find the section for Recovery Options, Contact Information, or Personal Details. Remove your phone number entirely. If the exchange requires a phone number on file, enter a Google Voice number or another VoIP number that is not tied to a physical SIM. This is not as secure as having no number at all, but it is much harder for an attacker to SIM swap than a mobile carrier number.
5. Confirm the Change
Log out and attempt a password reset or account recovery. The exchange should no longer offer SMS as an option. If it does, you missed a setting.
What about withdrawal whitelists and address books?
Removing your phone number from login and recovery does not protect you from a SIM swap that targets your email. If your exchange uses SMS to confirm withdrawal address changes or whitelist additions, an attacker who swaps your number can still add their own withdrawal address and drain your account over time.
Check whether your exchange offers hardware-key confirmation for withdrawals. If it does, enable that. If not, at minimum ensure that withdrawal address changes require a confirmation from your authenticator app, not SMS.
The one case where you might keep a number
Some exchanges require a phone number for regulatory compliance - know-your-customer (KYC) rules. In that case, you cannot delete it entirely. You can still:
- Disable SMS for 2FA and recovery.
- Use a number that is not your primary mobile line (a prepaid SIM you keep in a drawer, or a VoIP number).
- Place a port freeze or number lock with your carrier (covered elsewhere on this site) to make that number harder to steal.
What if the exchange won't let you remove SMS?
A few exchanges still mandate SMS as a required 2FA option, even if you also use an authenticator app. This is a design choice that increases SIM swap risk. If you encounter this:
- Contact support and ask to have SMS removed from your account. Some exchanges will do it on request.
- If they refuse, consider moving your funds to an exchange that does not force SMS on you. The inconvenience of opening a new account is small compared to the risk of losing everything in a SIM swap.
After removal: verify your new setup
Once your phone number is gone from the exchange, test your recovery process. Store your backup codes in a safe place - a fireproof safe, a password manager you control, or a second offline location. If you lose your authenticator app and have no backup codes and no phone number to recover with, you will lose access to your account permanently.
Not financial advice. rosiesol.xyz publishes market data and general information about Rosie. Crypto assets are volatile and you can lose everything you put in. Nothing here is a recommendation to buy, sell or hold, and we make no price predictions.
Prices are sourced from third parties and may be delayed or wrong. Verify anything you intend to act on against a primary source.