Keeping your wallet and accounts safe on a proxy or VPN

9 November 2026

When you open your e-wallet through a proxy or VPN, your connection passes through someone else's server before it reaches its destination. This article explains what that operator can and cannot see, where the real risks are, and how to protect your accounts, including your syriaproxy account itself.

What a proxy operator can and cannot see

Any proxy or VPN sits in the path of your traffic, so the question is not whether your data passes through it but what can be read from it:

• Sites and apps that use HTTPS: the operator can tell which site you connect to, when, and how much data moves, but not what is inside: not your password, your balance or the details of a transfer.
• Sites without encryption: the whole content can be read. Never enter account details on a page that does not show the padlock next to its address.

At syriaproxy we do not log the sites you visit, the content of your traffic or your DNS queries. What we do keep, such as your email, payments, usage amounts and session times, is listed in full in the Privacy policy.

Encrypted and unencrypted methods

The apps, the browser extension, the WireGuard file and the HTTPS proxy encrypt the leg between your device and our server, so the Wi-Fi network you are on and your internet provider cannot see which sites you open. SOCKS5 and HTTP do not encrypt that leg themselves, though the content of HTTPS sites stays protected by the sites' own encryption. After our server, your traffic leaves through the Syriatel network without our encryption, which is why it matters that the destination itself is encrypted.

For a wallet on your phone, use the app or WireGuard and keep SOCKS5 and HTTP for the programs that need them. The differences between the methods are in Syrian IP vs VPN vs proxy.

The risk of free apps and unknown proxies

• Free "Syrian VPN" apps. You do not know who runs them or how they make money. Some collect data about their users or inject ads into the connection, and some have no Syrian address at all, only a server address registered to Syria. The difference is explained in Mobile IP vs data center IP.
• Proxies posted by strangers in groups. Whoever runs the proxy sees everything that is not encrypted, and you do not know who else is using it or for what. Other people's use can get the address blocked or tied to suspicious activity.
• Certificate warnings. If your browser warns that a site's connection is not secure or its certificate is invalid, do not click through, especially on a sign-in page. Close the page and disconnect.

Official apps only

Install your wallet app from the official store or the service's official website. Never install a "modified" version or a file someone sent you on Telegram or WhatsApp, however often you are told it works abroad. The same goes for connection tools: get the syriaproxy apps from the Download page on our site, and WireGuard from your device's official store.

Verification codes and PINs

The code you receive by text message and your wallet PIN are yours alone. Do not give them to anyone, including someone who says they are support for your wallet or for us. Running your connection never requires them. Anyone in a private chat asking for a code "to verify your account" or "to unfreeze it" is most likely trying to take the account over.

Protect your syriaproxy account

1. A strong password you use nowhere else. Change it under Account and security in your account.
2. The proxy password is separate. If you suspect your SOCKS5 or HTTP details reached someone else, press New password in the Connect section. The old one stops working at once in all your programs; then put the new one into your own programs.
3. Review your sessions. Account and security has a Sessions list with the device, IP address and last activity. If you see anything you do not recognize, press End other sessions and change your password.
4. Remove a lost device. If a phone or computer with a WireGuard file goes missing, remove it from the Devices list.

One connection method per device

Create a separate file for each device with Add device instead of moving one file between your devices. That way you can remove a single device without touching the rest, and you see each device's usage on its own, so unexpected usage is easy to trace.

Do not share connection details

Sharing or selling your connection details is not allowed without our written permission, as set out in the Acceptable use policy. It also works against you: under the Terms you are responsible for all activity on your account, and every byte someone else uses comes out of your balance.

Questions

Create an account and use an encrypted connection method for your wallet.