Your email is the key. Protect it, and check every withdrawal address.
There is no password to steal, which removes the most common attack. It also means the account is exactly as safe as the inbox behind it.
Do this
- Put two-factor authentication on your email account.
- Never forward a magic link, and never read one out to anyone.
- Check the address bar before you sign in. Phishing clones copy the look, not the domain.
- Link an authenticator such as Telegram in settings, where it is offered, so we have a second way to reach you.
- Paste withdrawal addresses, then read the first and last characters back. Clipboard malware swaps addresses.
- Sign out on shared devices.
If you think someone else got in
Sign out everywhere, secure your email, and tell support immediately. Do not wait to see what happens.