Virgo — New Device Login Security
Real-time device alerts that let users stop account takeovers before damage is done — designing confidence, not fear.
01Impact first
"I didn't even know someone had logged into my account until my money was gone." That single line from a Virgo user started this project. We shipped a two-sided device verification system that alerts users the moment a new device signs in, with device type, location, and time, and lets them approve or block it instantly. Our competitive analysis found no major Indonesian wallet (OVO, DANA, Gojek, Grab, LinkAja) offered this. Virgo led instead of following, and the flow became the internal benchmark for security UX.
02The problem
As digital wallets became a daily habit, phishing and social engineering grew quietly alongside them. Account takeover rarely announces itself; victims find out after the damage. Most competitors simply logged users out with no warning, no notification, and no way to respond. Confusion was the entire security experience.
03Key design decisions
· A two-sided flow: the new device waits on a verification screen while the trusted device receives a push asking "did you just try to log in from a new device?"
· Full context up front: device type, location, and time, laid out plainly
· Two clear actions: "Yes, it's me" or "No, block this". Blocking locks out the new device and prompts an instant passcode change
· Emotional calibration: illustrations that signal concern without panic. The goal was to calmly empower, not alarm
04Reflection
Security UX isn't about locking people out. It's about letting the right person in without making everyone feel suspicious. Adding security is easy. Designing confidence is the harder, more valuable job, and it shipped in two weeks.
Let's build something that moves the numbers.
Need a product design lead for your team, or senior hands for a freelance project? Let me know what you're building and where it's stuck.