An unfamiliar login or transaction alert demands quick action, but panic creates openings for a second attack. Use a clean route to the service and work through a fixed response sequence.
Do not use the alert link
Open the official app or a saved website address. Verify recent sessions, transfers, connected applications, and approval history. Capture transaction identifiers and timestamps for support.
Contain access
Revoke suspicious sessions and permissions, change the account password from a trusted device, and strengthen multi-factor authentication. If a wallet key may be exposed, move remaining assets to a newly secured wallet using a verified address.
Preserve evidence
Keep screenshots, message headers, domains, wallet addresses, and support case numbers. Report impersonation through the platform’s official channel and warn contacts if your account sent messages.
0 Comments
No comments yet. Be the first to share a thought.