Secure Your Account

Security checklist

• Use a unique password stored in a trusted password manager.
• Enable an authenticator app and save the setup key securely.
• Do not share one-time codes or recovery information.
• Verify the domain before entering credentials or approving a transfer.
• Review security and session activity after unexpected prompts.
• Sign out other sessions after suspected credential exposure.

Recognize social engineering

Support should not ask for your password, authenticator code, or remote control without a separately verified support process. Urgency, guaranteed-return claims, and requests to bypass the platform are warning signs.

Respond to suspected access

Change the password, complete MFA, revoke other sessions, review financial activity, and contact support from a verified route. Report suspicious transfers promptly.