Common warning signs
Act now or lose access
Pressure is designed to prevent careful address and contact checks.
Send an OTP or password
A legitimate recovery flow should not require sending a secret to another person.
Install remote-access software
Do not hand control of the phone to someone offering account support.
Before following a contact
- Compare the complete address with a route you previously verified.
- Open the account page independently instead of using an unsolicited message link.
- Keep OTPs and recovery codes inside the recovery screen you opened.
- Do not transfer money to an individual promising account access or priority help.
If information may have been exposed
Stop the session
Close the suspicious page and do not continue the conversation.
Secure connected accounts
From a trusted device, change the affected password and secure the related email account.
Review sessions and activity
Sign out unfamiliar sessions if the verified account interface provides that control.
Use a verified channel
Contact the relevant service through details displayed in its verified interface, not through the suspicious message.
Privacy rule: remove names, phone numbers, account IDs, balances and codes from screenshots before using them to describe an error.