Scammers use familiar brands, urgent messages, and payment pressure to imitate account support. Slow the interaction down and verify every channel independently before sharing information or approving a transaction.
Watch for address and identity tricks
Lookalike domains can swap letters, add words, or use misleading subdomains. A logo and HTTPS padlock do not prove that a page belongs to the intended operator. Verify the complete address through a trusted route.
Reject secret or urgent requests
Fake support may demand an OTP, password, PIN, screen share, remote-access app, or payment to unlock a withdrawal. Do not comply. End the conversation and contact support through a separately verified channel.
Preserve evidence safely
Save the message, sender details, address, transaction reference, and time without continuing the conversation. Contact the relevant bank or wallet promptly after an unauthorised payment and follow official reporting guidance.
Quick checklist
- Inspect the complete domain.
- Never share OTPs, passwords, or wallet recovery phrases.
- Reject remote-access installation requests.
- Do not pay a separate fee to release funds.