Axiom account security checklist

Axiom account security is mostly about your device, your browser and your inbox, not Axiom's servers. Axiom does not hold your keys, so nobody drains you by breaching Axiom's login database; every documented loss we found involved a fake app, a look-alike domain, a malicious bookmark, a browser extension or a fake support agent. This page lists those documented threats, gives a practical checklist to protect your Axiom wallet, and ends with what to do if you think you have already been hit.

What are the documented threats to Axiom accounts?

Six distinct threats have been documented by Axiom's own docs, security researchers, phishing trackers or community investigators. Five of them target you rather than the platform.

Nothing in this list broke Axiom's smart contracts or its Turnkey wallet layer. Each attack got hold of a seed phrase, a live session or, in the staff case, information. The checklist below closes those three doors.

Why non-custodial does not make your Axiom wallet safe

Non-custodial means Axiom cannot spend your funds, and also that Axiom cannot undo anything done with them. Axiom creates a wallet at signup, describes it as secured by Turnkey, and states in its Terms that it does not store copies of keys. That protects you from Axiom, not from yourself.

Two things can still act as you. The first is your seed phrase, which is full control of the wallet forever. The second is a logged-in browser session: Turnkey's case study on the Axiom trading terminal describes policy-based signing that lets the platform automate on-chain actions such as limit orders, which is why a stolen session can place trades without ever seeing your seed phrase. The February 2026 incident added a privacy concern, not a route to your funds.

Axiom's Terms cap its liability at $100, and there is no reimbursement fund. Our Axiom Pro review covers legitimacy; this page assumes you have decided to use the platform safely.

Checklist part 1: reaching the real site

Most Axiom scams start with a wrong address or a wrong browser. These five habits remove that whole category.

1. Type the domain. The only official site is axiom.trade, with docs.axiom.trade for documentation. Type it yourself; skip search ads and links in DMs, X replies and Telegram groups.
2. Make one bookmark, from the address bar. Once the page loads on the correct domain, bookmark it with your browser's own button. Never drag a "bookmark" from a web page, tweet or Discord post to your bookmarks bar; that is how the December 2025 drainer worked.
3. Trade in a separate browser profile with no extensions. Create a fresh profile used only for Axiom and install nothing in it: no trackers, no "Axiom tools", no paper-trading overlays. Any extension in your logged-in session can read it, as our Axiom Trade Chrome extension warning explains.
4. Check the address bar on every login. The real domain has nothing before axiom.trade except https://. A prefix like auth-, an ending like .com or .app, or an extra word anywhere means a clone.
5. Secure the account you log in with. Axiom's login methods are an email one-time code, Google, or Phantom. Whoever controls that email or Google account controls your Axiom login, so give it a strong unique password and two-step verification. See our Axiom Trade sign up guide.

Checklist part 2: the seed phrase and keys

The seed phrase is the wallet. Anyone who has it does not need your login, your session or your device.

1. Never paste the seed phrase anywhere. Not into a website, an app, an extension, a Discord "verification" bot, a support chat or a "wallet sync" tool. Axiom's login never asks for it. There is no exception.
2. Export it and store it offline. Axiom shows the phrase at signup and, per its signup docs, keeps it accessible in your account settings. Write it on paper, make a second copy, and keep both away from cameras, cloud notes and email drafts.
3. Know that the backup is real. The docs note the wallet can be imported into Phantom, Rabby or Solflare, so your funds do not depend on Axiom staying online. Only ever import it on a device you trust.
4. Treat exposure as compromise. If the phrase was ever typed into a page you now suspect, or photographed on a phone that has since been shared or repaired, create a new wallet and move funds to it.

Checklist part 3: limit what a breach can take

Even with perfect habits, assume a session could be stolen. The goal is to make that survivable.

1. Keep the trading balance small. Fund the Axiom wallet with what you are actively trading, not your whole stack. A drained trading wallet should hurt, not end you.
2. Move profits out on a schedule. Withdraw gains to a wallet whose keys have never been in a browser, such as a hardware wallet. Sending funds out is covered in our Axiom withdraw guide.
3. Separate wallets by purpose. Axiom's changelog notes support for up to 25 active wallets. A wallet used for sniping new pairs does not need to share a balance with the one holding longer positions.
4. Log out on any device that is not yours. A shared computer keeps your session until you end it.

Checklist part 4: Discord, X and anyone offering help

Support impersonation works because people are stressed when they ask for help. Set these up before you need support.

1. Disable Discord DMs from server members. Axiom's support docs advise this directly. Official support is a ticket in the official Discord (discord.gg/axiomtrade, verify, then the tickets channel), and staff never message first.
2. Verify announcements on @AxiomExchange. Airdrops, token launches, "migrations" and "security updates" that do not appear on Axiom's official X account or Discord announcements are fake. Axiom has announced no token, so any "claim your AXIOM" site is a scam; see our Axiom token page.
3. Do not trust a status site. Axiom has no official status page we could find, and third-party trackers showing "Axiom" outages monitor axiom.co, a different company. If the site is down, check @AxiomExchange rather than a "backup login" someone posts.
4. Never share your screen with support. A real ticket does not require a screen share, remote control or a "test transaction".

The official channels, and what each is for, are listed on our contact Axiom Trade page.

What to do if your Axiom account is compromised

Move first, investigate second. Funds on-chain cannot be recovered, so the only thing that matters in the first minutes is what is still there.

1. Stop using the suspect device. If an extension, bookmark or fake app was involved, that device is compromised until it is cleaned.
2. From a clean device, move the remaining funds. Log in on a device you trust and send what is left to a brand-new wallet with a fresh seed phrase. If the phrase may have leaked, the old wallet itself is burned; moving funds between wallets inside the same account is not enough.
3. Cut the attacker's other access. Delete the compromised browser profile, change the password on the email or Google account you log in with, and sign out of that account's other sessions.
4. Report it through the official channel. Open a ticket in the official Discord. Platform vulnerabilities can be reported by email through Axiom's contact page. Expect account help, not reimbursement.
5. Keep records and ignore recovery offers. Save transaction hashes and the domain or extension involved. Anyone who contacts you afterwards promising to recover funds is running the second stage of the same scam.

Sources: Axiom docs: Support, Axiom docs: Signup, Socket research, September 9, 2026, CoinDesk, February 26, 2026, Turnkey's Axiom case study (September 2025), community reports on the fake app and bookmarklet campaign. Axiom Terms and Privacy Policy read on axiom.trade, September 17, 2026.