The Bybit referral code is SAVEBONUS20. Enter it in the referral field when you create your account, or register through https://partner.bybit.com/b/SAVEBONUS20 so it is filled in automatically. It links your account to the referral so you can see and take part in the welcome tasks Bybit offers new users in the Rewards Hub. There is no fixed sign-up bonus that applies to everyone: welcome offers depend on your country and change over time, and most of them only unlock after identity verification. That is why this guide covers your whole first day: registering with the promo code correctly, getting KYC approved on the first try, and locking the account down before any money arrives.

What should your first day on Bybit look like?

A good first day takes about an hour and has a fixed order. Doing the steps in this order avoids the two problems that cause the most grief later: a referral that never attached, and an account that is easy to break into.

Step 1: Can you use Bybit where you live?

Check this first, because nothing else matters if the answer is no. Bybit's global platform restricts residents of the United States, Canada, Singapore, Hong Kong, mainland China and other jurisdictions listed in its terms. The United Kingdom has been in a retail wind-down posture. Users in the European Economic Area are often routed to Bybit EU (bybit.eu), a separate entity with its own rules, products and promotions.

Read the current geographic disclosure on Bybit's site before you sign up, because the list changes. And don't try to get around it with a VPN. A VPN doesn't change your legal residence, and it won't get you through identity verification: your ID, your selfie and, at the higher level, your proof of address all show where you really live. Accounts opened that way are the ones that get frozen, typically when you try to withdraw.

Step 2: Register with the SAVEBONUS20 referral code

1. Open https://partner.bybit.com/b/SAVEBONUS20 in a private browser window, or download the official Bybit app from the App Store or Google Play (check the developer name and review count; clone apps exist).
2. Choose email or mobile number and set a strong password you don't use anywhere else.
3. Find the referral code field. With the link, it should already say SAVEBONUS20. In the app you may need to tap to expand it. Type SAVEBONUS20 in capitals if it's empty.
4. Read the field back before submitting. If it shows a different code (sometimes left on the device from a link you clicked earlier), clear it and type SAVEBONUS20, or start again in a fresh private window.
5. Complete the email or SMS verification and the slider or puzzle check.

Plan on getting the code in at this moment. Referral codes on exchanges are attached at registration; adding one to an existing account usually isn't possible. There is a section further down on what to do if it went wrong.

Step 3: Set up two-factor authentication and a passkey

Go to Account & Security (profile icon, then security settings in the app).

Authenticator app (2FA)

1. Install an authenticator app such as Google Authenticator or another reputable one.
2. In Bybit, choose to link Google Authenticator / 2FA and scan the QR code.
3. Write down the setup key on paper and keep it somewhere safe and offline. If you lose your phone without it, recovery is slow and involves support and identity checks.
4. Enter the six-digit code to confirm.

SMS codes are better than nothing but are vulnerable to SIM-swap attacks. An authenticator app is the baseline.

Passkey

Bybit supports passkeys (FIDO), which use your device's fingerprint, face unlock or screen lock instead of typing a password. They are phishing-resistant: a fake website can't capture them the way it captures a password. In Account & Security, choose Add Passkey, complete the verification, and pick your method (iCloud Keychain, another device via QR code, a USB security key, or your browser profile). Bybit lets you create up to 10. Add one on the phone you use most, and consider a second on another device as a backup.

Step 4: Set an anti-phishing code

This takes two minutes and protects you from the most common attack against exchange users. In Account & Security, find Anti-Phishing Code, enter a word or combination only you know (not your password), and confirm. From then on, every genuine email and text from Bybit includes that code.

The rule after that is simple: if a message claiming to be from Bybit doesn't contain your code, or shows the wrong one, don't click anything in it. Bybit's help center asks users to report such messages.

Phishing patterns to recognise

• "Your account will be frozen" emails or SMS with a link to "verify" or "unlock". Real security notices don't need you to log in through a link.
• Fake reward messages promising an extra welcome bonus or airdrop if you connect a wallet or log in on a special page.
• "Support agents" on Telegram, WhatsApp or X who message you first after you post a question publicly. Bybit support works through the official app and website. Nobody legitimate asks for your password, 2FA code or the setup key.
• Lookalike domains in search ads, with an extra letter or a different ending. Bookmark the real site and use the bookmark.
• Screen-sharing requests to "help you with KYC". Never share your screen with someone while you're logged in.

Step 5: Identity verification (KYC) that passes the first time

Bybit's verification comes in levels. In Bybit's help center they're described as Standard (identity assessment plus proof of identity: a government photo ID and a face check) and Advanced (proof of address, which can only be submitted after Standard is approved). In the app you may see them as Lv.1 and Lv.2.

Bybit lists documents it does not accept as proof of address, including mobile phone statements, insurance documents, medical bills, bank transaction slips and handwritten receipts. Student, work and travel visas are not accepted as proof of identity.

Why KYC gets rejected, and how to avoid it

Bybit publishes its common rejection reasons. These are the ones that catch most people:

• Glare. A ceiling light reflected on a laminated ID card hides your name or date of birth. Photograph it near a window with indirect daylight, and tilt the card slightly if you see a white spot.
• Cropped edges. All four corners of the document must be visible. Leave a margin of background around it.
• Blur. Hold the phone steady, tap to focus, and check the photo before uploading.
• Name mismatch. The name you type must match the document exactly, in the same order. Don't use a nickname, don't drop a middle name if it's printed, and watch out for accents or characters your document spells differently. If your proof of address shows someone else's name (a partner's utility bill, a parent's bank statement), it will be rejected.
• Expired ID. Check the expiry date first. An ID that expired last week fails.
• Screenshots, scans and photocopies. Bybit wants the original document photographed in colour, not a screenshot, black-and-white copy or edited image.
• Missing pages or sides. Upload front and back if your ID card has two sides.
• Unsupported script. If your ID isn't in Latin characters and is rejected for language, an international passport usually solves it.
• Face check fails. Good lighting, no hat or sunglasses, face the camera directly and follow the prompts slowly.

Approval is often fast, but it can take longer at busy times or if a manual review is triggered. If you're rejected, read the reason given, fix exactly that, and resubmit. Don't open a second account under another email to try again; one person, one account.

Step 6: Lock down withdrawals

Still in Account & Security, find the Withdrawal Security section. Three settings matter:

• Withdrawal Address Book and Whitelist. You save the addresses you withdraw to, each with the right coin and network. A verified address can skip the email and 2FA codes on later withdrawals, which is convenient, so only verify addresses you fully control.
• Withdraw via Address Book. When on, withdrawals can only go to saved addresses. Someone who gets into your account can't paste in their own address on the spot.
• New Address Withdrawal Lock. Newly added addresses can't be used for 24 hours. If an attacker adds an address, you get a day to notice and react.

Together, these turn "someone logged in" from a disaster into an inconvenience.

Device management

In the security settings you can review the devices and sessions that have accessed your account. Check it on day one so you know what "normal" looks like, and check it again if you ever get a login alert you didn't expect. Remove devices you don't recognise and change your password immediately.

Step 7: How verification unlocks welcome tasks in the Rewards Hub

The Rewards Hub is where Bybit shows new-user tasks: things like completing verification, making a first deposit or a first trade within a set time. What you see depends on your country, the entity you're on and what campaign is running, so the honest answer to "how much is the Bybit sign-up bonus?" is: open the Rewards Hub after registering and read the tasks shown to you.

What's consistently true:

• Many tasks require identity verification before you can complete or claim them. Unverified accounts often see tasks they can't finish. That's one more reason to do KYC on day one.
• Tasks have deadlines counted from registration. Read them on day one so a window doesn't close while you're still deciding.
• Rewards are often vouchers or trial funds with conditions on how they're used, not withdrawable cash. Read each task's terms.
• Rewards vary by country and change. Any fixed number you see in an ad elsewhere may not match your account.

Don't deposit more or trade riskier products than you intended just to tick a task.

Step 8: Make a small test deposit

1. Go to Assets > Deposit, choose the coin (USDT is common) and the network.
2. Make sure the network on the sending side matches exactly what you selected on Bybit. Sending on the wrong network can mean lost funds.
3. Send a small amount first and wait for it to arrive.
4. Deposits usually land in your Funding account. Transfer to your Unified Trading Account before trading.

For EEA readers: Bybit EU

If you live in the European Economic Area, you may be directed to Bybit EU at bybit.eu. It's a separate company operating under EU rules, and the difference is practical:

• the terms, product range and fees can differ from the global site;
• welcome campaigns and how referrals work can be different too, so check what bybit.eu shows rather than relying on global-site guides;
• the KYC process follows EU requirements and may ask for proof of address earlier.

Use whichever platform Bybit routes you to for your real residence. Don't try to switch to the global site from inside the EEA.

What if the referral wasn't applied?

First, confirm it. In your profile or the referral section of the app, look for an indicator of who referred you, or check whether the Rewards Hub shows referral-linked tasks. Then:

1. If you've only just registered and haven't verified or deposited, contact Bybit support through the official in-app chat, give your UID and explain that SAVEBONUS20 should have been attached at sign-up. Support may or may not be able to help, since referral relationships are normally fixed at registration, but asking costs nothing.
2. Don't create a second account to redo it. Multiple accounts for one person break the terms and can disqualify you from all rewards or lead to restrictions.
3. Don't use "referral fixers" who message you offering to change your code for a fee. That's a scam.
4. Next time, use the link in a private window and read the field before tapping Sign up.

Your day-one checklist

• Country checked against Bybit's restrictions (or routed to Bybit EU)
• Registered with SAVEBONUS20 in the referral field
• Authenticator 2FA set, setup key written on paper
• Passkey added on your main device
• Anti-phishing code set
• Standard KYC approved; Advanced submitted if needed
• Withdraw via Address Book and New Address Withdrawal Lock switched on
• Device list reviewed
• Rewards Hub tasks read, with deadlines noted
• Small test deposit received on the correct network

FAQ: Bybit referral code, promo code and sign-up bonus

What is the Bybit referral code?

SAVEBONUS20. Enter it in the referral field at registration or use the partner link so it's filled in for you.

Is SAVEBONUS20 a promo code?

People search for it as a promo code. In Bybit's sign-up form it goes in the referral code field. It's entered once, when you open the account.

How much is the Bybit sign-up bonus?

There's no single fixed amount. Bybit's welcome offers depend on your country and change over time, and they appear as tasks in the Rewards Hub. Check what your account shows after registering.

Do I need KYC to get welcome rewards?

In most cases, yes. Many Rewards Hub tasks require identity verification first. Verifying on day one also gives you the full deposit and withdrawal limits.

Why was my Bybit KYC rejected?

The usual reasons are glare, cropped corners, blur, a name that doesn't match the document, an expired ID, or uploading a screenshot or copy. Fix the specific reason given and resubmit.

Should I use SMS or an authenticator app?

An authenticator app, plus a passkey if your device supports it. Keep the 2FA setup key on paper.

Can I add the referral code after signing up?

Usually not; referral relationships are set at registration. Contact support with your UID if it just happened, but don't open a second account.

I'm in the EU. Does this guide apply?

The security and KYC advice does. Your platform, terms and offers may be Bybit EU's, which differ from the global site.

Short risk note

Crypto is volatile and you can lose money, especially with leverage. Welcome rewards come with conditions and don't change that. Security settings reduce the risk of theft but can't remove it, and no exchange balance is the same as money in a bank. Deposit only what you can afford to lose, keep your own records, and check your local tax rules.