Why this guide exists
Managing financial accounts safely should be straightforward. This guide highlights best practices for signing in, steps to verify authenticity of a page, and practical tips for recovery if you suspect unauthorized access. Its purpose is educational — to help you make safer choices online.
Before you attempt to sign in
Always confirm you are on the official domain. Check the exact URL in the browser address bar and the HTTPS lock icon. Use a bookmark for frequent destinations and avoid clicking suspicious links received by email or chat. Enable multi-factor authentication (MFA) — it’s one of the most effective defenses.
Recognizing phishing and fake pages
Phishing pages often mimic branding but include subtle differences: misspelled domains, altered logos, or unexpected requests for extra information. Messages that pressure you into immediate action are a common red flag. Never share passwords or one-time codes with anyone.
Password and device hygiene
Use unique, lengthy passwords for each account and a reputable password manager to store them. Keep your operating system and browser updated, avoid public or shared computers for sensitive access, and minimize untrusted browser extensions. Review active sessions and remove ones you don't recognize.
Recovery and support
Keep recovery email addresses and phone numbers current. If you lose access, follow the official recovery process and report suspicious transactions through verified support channels. Capture screenshots and keep communication records if you must escalate.
Common scams & sample actions
Watch for invoice scams, tech-support requests for temporary access, social engineering asking for verification codes, and spoofed domains. If you notice suspicious activity: change your password, revoke active sessions, document the incident, and contact official support immediately.
Final reminders
Security is a habit. Regularly audit account access, maintain a trusted list of devices, and stay informed about current scams. If unsure, pause and use official channels — never disclose your passwords or verification codes.