always enable 2 step verification in this exchange and always check its url being written as ".co.nz" not any other
