Asset protection, secure custody and digital-first safeguards are central to GHB.

Client digital assets are intended to be held in multi-signature or MPC wallet infrastructure, with the majority in cold storage. Client assets are intended to be strictly segregated from GHB's own assets at all times, under both the onshore and offshore perimeters. VARA mandates multi-signature or MPC security and strict segregation, and DFSA/FSRA rules impose parallel custody standards on the offshore entity. GHB's architecture is built to exceed those requirements, not merely meet them.

GHB will maintain insurance coverage for client digital assets covering a minimum of 10% of average client assets, as required under VARA rules. The intended offshore entity will maintain parallel coverage consistent with DFSA or FSRA requirements. Details of the insurance arrangements are available to clients on request.

How to recognise phishing, secure your GHB account, and protect your crypto wallet. Step-by-step guides in the GHB app and on the Security & Awareness page. We run regular phishing simulations and security-awareness content for all customers globally.

A 24/7 fraud and security hotline accessible from any country. In-app reporting for suspicious activity. A commitment to acknowledge every security report within 2 hours and to provide a substantive response within 24 hours.

We will never ask for your password, your private keys, or your one-time passcode by email, phone, or SMS. We will never ask you to move funds to a "safe account." If someone claiming to be from GHB does any of these things, they are not from GHB.