Why was I asked for an extra verification step?
Why some actions ask for a code even though you're already logged in with 2FA — and why, for 24 hours after certain security changes, the same actions can be held with no code able to release them.
Certain sensitive actions — like withdrawing/sending crypto, or adding or changing a saved recipient in your address book — ask for an extra one-time verification step (an authenticator code plus an emailed code) even though you're already signed in with two-factor authentication turned on. This is a deliberate extra layer of protection on higher-risk actions. If you enter both codes correctly, the action goes through right away.
A separate, stricter case: the 24-hour security hold. For a fixed 24 hours (1,440 minutes) after certain security-related changes to your account, Paysavo puts a temporary hold on crypto withdrawals/sends and on adding or changing a saved recipient. The changes that start this hold are:
- Changing your password
- Signing in with a recovery/backup code
- Removing your last passkey
- Turning off your authenticator (2FA/TOTP)
During this hold, entering a correct authenticator code and email code will not let the action through. The hold is checked before your codes are ever verified, so there is no code or one-time step you can complete to release it early — it is a fixed-length wait, not a verification step. If you're affected, you'll see a message that the action is temporarily protected after your recent security change, with guidance to try again once the hold expires. If it's urgent, contact Paysavo support.
How to tell which one you're dealing with:
- You're prompted to enter an authenticator code and an email code, and a correct pair lets the action through immediately — that's the routine extra verification step described above.
- You get a message that the action is temporarily protected/blocked because of a recent security change, and it tells you to try again later rather than asking you for a code — that's the 24-hour hold. No code will skip it.
This hold currently applies to crypto withdrawals/sends and address-book (recipient) changes. If you're not sure which situation you're in, or you have an urgent need to withdraw or update a recipient while a hold is active, contact support.