Authenticated sessions
Sign in with a password or a one-time code sent to your email. Sessions are server-validated on every request to an account area, not trusted from the browser.
How accounts are protected, how access is controlled, and the regulatory basis on which the platform operates.
Sign in with a password or a one-time code sent to your email. Sessions are server-validated on every request to an account area, not trusted from the browser.
Every account and trading screen is guarded. The public marketing site and the authenticated application are separate surfaces with separate rules.
A rejected order — market closed, insufficient balance, invalid quantity — is returned as an order error with its own code. It never signs you out. Only a definitive authentication failure ends a session.
A dropped connection or a backend restart produces an inconclusive result, not a logout. The session check distinguishes "you are signed out" from "I could not tell", and only acts on the first.
Identity documents are reviewed before an account is fully unlocked, mirroring a real onboarding process.
Sensitive endpoints are rate limited to make automated abuse impractical, without interfering with normal use.
Stated plainly, because a vague answer on this question is worse than an uncomfortable one.
Authorisation not yet held. VNK Avenue does not currently hold a financial services licence in any jurisdiction, and does not describe itself as regulated.
We will publish the jurisdiction, the regulator and the licence number on this page as soon as authorisation is granted, and not before. Until then, nothing on this site describes VNK Avenue as regulated, authorised or supervised.
Further disclosures are published on the disclaimer and risk disclosure pages.
Every item here is a technical fact about how the platform runs, or a commitment we control directly. None of it depends on a regulator.
Customer balances are tracked in their own ledger, distinct from company funds, and every movement is reconciled and auditable.
All traffic between your device and the platform runs over TLS. Credentials are never transmitted or stored in plain text.
Funds can only be withdrawn to a bank account that has been verified against your own completed KYC record.
Every charge on an order is itemised on the ticket before you place it, and again on the contract note afterwards.
Every administrative action taken on an account is recorded against the person who performed it, including support access.
Independently certified against the ISO standard, under certificate E2023094323.
If you believe you have found a vulnerability, please report it before disclosing it publicly. Include the steps to reproduce and what you were able to access — we will confirm receipt and keep you updated.
Report an issueTrade across four market segments with professional market access.
Investments in securities markets are subject to market risks. Read all the related documents carefully before investing.