Use the official BitBox Support contact form if you need help or want BitBox to verify a message, website, call, or letter. Download the BitBoxApp only from the official BitBoxApp download page.
Check the complete website or sender address, not only the displayed name or link text. If a BitBox-branded destination is not listed below, treat it as suspicious and do not continue through it.
An official-looking address never makes a request for wallet secrets legitimate
BitBox Support will never ask for recovery words, a wallet backup, private keys, passwords, passphrases, PINs, or authentication codes. A request for any of these is fraudulent even if the display name, logo, or sender address looks familiar.
Official BitBox websites
| Domain | Purpose |
|---|---|
bitbox.swiss |
Main BitBox website, product information, and downloads |
shop.bitbox.swiss |
Official BitBox shop |
support.bitbox.swiss |
BitBox Support Hub and knowledge base |
blog.bitbox.swiss |
Official BitBox blog |
contact.bitbox.swiss |
Official BitBox Support contact form |
shiftcrypto.support |
BitBox support system |
Official pages may use paths below these domains. In an address such as https://support.bitbox.swiss/en_US/..., the domain is the part after https:// and before the next /. An address that merely contains the words “BitBox” or “bitbox.swiss” somewhere else is not necessarily controlled by BitBox.
Legacy BitBox domains that redirect
These domains are controlled by BitBox but are maintained primarily as redirects:
| Domain | Current role |
|---|---|
shiftcrypto.io |
Redirect |
digitalbitbox.com |
Redirect |
shiftcrypto.org |
Redirect |
shiftcryptosecurity.ch |
Redirect |
shiftcryptosecurity.com |
Redirect |
shiftdevices.com |
Redirect |
A redirect should lead to an expected BitBox-controlled destination. Stop if your browser arrives at an unrelated domain or displays a security warning.
Official BitBox support and privacy email addresses
| Email address | Purpose |
|---|---|
support@mail.bitbox.swiss |
Current primary support reply address |
support@bitbox.swiss |
Legacy support receiving address; replies come from support@mail.bitbox.swiss
|
privacy@mail.bitbox.swiss |
Privacy-related inquiries |
Addresses ending in @shiftcrypto.ch
|
Legacy company addresses that are being phased out |
The preferred way to start a new support request is the official BitBox Support contact form. For background about BitBox support-data handling, see Why we delete your contact information and how we handle your data.
What an official address does not prove
A familiar display name, logo, link label, or screenshot can be copied. A scammer can also trigger a genuine automated confirmation by entering your email address into a real contact form.
Do not rely on the sender address alone when:
- you did not initiate the contact or support request;
- the message creates urgency or threatens wallet access;
- someone contacts you separately by phone, SMS, messenger, or direct message;
- you are asked to install software, provide remote access, connect a BitBox, approve an action, transfer funds, or reveal information; or
- a link leads somewhere different from the address shown in the message.
In these cases, stop and follow Check whether a BitBox contact is genuine.
Verify an uncertain destination
- Do not use links, QR codes, phone numbers, reply details, ticket codes, or employee contacts from the uncertain communication.
- Open a new browser tab.
- Manually enter
bitbox.swiss,support.bitbox.swiss, orcontact.bitbox.swiss, depending on what you need. - If you want BitBox to verify the destination or message, create a completely new inquiry through the official contact form.
If nothing else happened, contacting Support is optional. If the communication seems urgent or remains unclear, asking through a new official inquiry before acting is safer than continuing under pressure.
The check is complete when the domain or sender matches the maintained reference and the requested action is consistent with BitBox support and product behavior. A matching address never makes a request for wallet secrets legitimate.