Use the official BitBox Support contact form if you need help or want BitBox to verify a message, website, call, or letter. Download the BitBoxApp only from the official BitBoxApp download page.

Check the complete website or sender address, not only the displayed name or link text. If a BitBox-branded destination is not listed below, treat it as suspicious and do not continue through it.

An official-looking address never makes a request for wallet secrets legitimate

BitBox Support will never ask for recovery words, a wallet backup, private keys, passwords, passphrases, PINs, or authentication codes. A request for any of these is fraudulent even if the display name, logo, or sender address looks familiar.

 

Official BitBox websites

Domain Purpose
bitbox.swiss Main BitBox website, product information, and downloads
shop.bitbox.swiss Official BitBox shop
support.bitbox.swiss BitBox Support Hub and knowledge base
blog.bitbox.swiss Official BitBox blog
contact.bitbox.swiss Official BitBox Support contact form
shiftcrypto.support BitBox support system

Official pages may use paths below these domains. In an address such as https://support.bitbox.swiss/en_US/..., the domain is the part after https:// and before the next /. An address that merely contains the words “BitBox” or “bitbox.swiss” somewhere else is not necessarily controlled by BitBox.


Legacy BitBox domains that redirect

These domains are controlled by BitBox but are maintained primarily as redirects:

Domain Current role
shiftcrypto.io Redirect
digitalbitbox.com Redirect
shiftcrypto.org Redirect
shiftcryptosecurity.ch Redirect
shiftcryptosecurity.com Redirect
shiftdevices.com Redirect

A redirect should lead to an expected BitBox-controlled destination. Stop if your browser arrives at an unrelated domain or displays a security warning.


Official BitBox support and privacy email addresses

Email address Purpose
support@mail.bitbox.swiss Current primary support reply address
support@bitbox.swiss Legacy support receiving address; replies come from support@mail.bitbox.swiss
privacy@mail.bitbox.swiss Privacy-related inquiries
Addresses ending in @shiftcrypto.ch Legacy company addresses that are being phased out

The preferred way to start a new support request is the official BitBox Support contact form. For background about BitBox support-data handling, see Why we delete your contact information and how we handle your data.


What an official address does not prove

A familiar display name, logo, link label, or screenshot can be copied. A scammer can also trigger a genuine automated confirmation by entering your email address into a real contact form.

Do not rely on the sender address alone when:

  • you did not initiate the contact or support request;
  • the message creates urgency or threatens wallet access;
  • someone contacts you separately by phone, SMS, messenger, or direct message;
  • you are asked to install software, provide remote access, connect a BitBox, approve an action, transfer funds, or reveal information; or
  • a link leads somewhere different from the address shown in the message.

In these cases, stop and follow Check whether a BitBox contact is genuine.


Verify an uncertain destination

  1. Do not use links, QR codes, phone numbers, reply details, ticket codes, or employee contacts from the uncertain communication.
  2. Open a new browser tab.
  3. Manually enter bitbox.swiss, support.bitbox.swiss, or contact.bitbox.swiss, depending on what you need.
  4. If you want BitBox to verify the destination or message, create a completely new inquiry through the official contact form.

If nothing else happened, contacting Support is optional. If the communication seems urgent or remains unclear, asking through a new official inquiry before acting is safer than continuing under pressure.

The check is complete when the domain or sender matches the maintained reference and the requested action is consistent with BitBox support and product behavior. A matching address never makes a request for wallet secrets legitimate.