It’s wise to have two-factor authentication enabled on both your Luno account and the email address associated with your Luno account. If you use Gmail, use Google’s Gmail security checklist to ensure your email is safe.
A recent feature that we've rolled out to Security Centre is notification tags – if your Luno account is accessed by a new device, or a new API is created on your account, you'll notice a "New" tag display next to the Security Centre in the menu. These tags will appear in the Active Devices and API keys sections if any recent activity has been detected on your account in these areas, and will disappear once acknowledged.
Steps to take if you suspect your account has been compromised.
Read up on locking your account
Change your password in the Security Centre
Report the suspicious transactions via the link in one of your payments emails
We cannot restore your cryptocurrency (Bitcoin or Ethereum) if it has been stolen. Rather be safe than sorry.