When the inbox behind your exchange login is gone: getting the email back first, then updating the account
The email address on your exchange account is more than a login name. It receives verification codes, withdrawal confirmations and security alerts, and it is often the key to resetting everything else. People lose access to it in ordinary ways: an old university or work address that has been closed, a free mailbox deleted for inactivity, or an account taken over by someone else. Whatever the cause, the order of steps matters. Recover or secure the email first, then deal with the exchange, and avoid anyone offering shortcuts.
Work out why you lost access
If the mailbox was closed by your employer or university, it is probably gone for good and you will need the exchange's change-email process. If you forgot the password, use the email provider's own recovery page and the phone number or backup address you registered there. If someone changed the password, act quickly: the provider's recovery form is the priority, and you should check from the exchange app, if you are still logged in, whether any withdrawals or setting changes have happened.
Secure the exchange account while you can
If you are still logged in to the exchange app, review recent activity, devices, the withdrawal address list and API keys straight away. If anything looks wrong, use the account disable or freeze option in the security settings. Then look for the option to change the registered email. Most exchanges require codes from both the old and the new address, but offer an alternative route when the old one is unreachable, usually involving identity verification and a review period.
Prepare for the identity check
The alternative route typically asks for your MyKad or passport, a selfie or face scan, and sometimes information only the account owner would know, such as a recent deposit amount or transaction ID. Have these ready before you start. Expect withdrawals to be restricted for a period after the email changes; the help center article for the process explains the current rules. Start the process only from within the app or the exchange's help center, never through a link received by message.
Make the new email hard to lose
Use an address you control for the long term, ideally one dedicated to financial accounts. Protect it with a strong unique password and an authenticator app, add a current recovery phone number and a backup address, and note where those recovery details are recorded. Once the exchange account shows the new email, set or check your anti-phishing code so that genuine messages to the new inbox are easy to recognise.
Risk boundary: Malaysia Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Identify whether the mailbox is closed, forgotten or hijacked and start with the provider's recovery.
- If still logged in, review activity, devices, addresses and API keys and freeze the account if needed.
- Prepare your MyKad or passport and recent transaction details for the change-email identity check.
- Move to a long-term email with its own authenticator and set the exchange anti-phishing code.