If you received a suspicious link or message from any entity claiming to be associated with us, report it ASAP to our support team. You may be a target of phishing, a cybercrime where someone poses as a legitimate company or government entity to obtain victims' personal information. 

The most important thing is that you do not click on any links or download any attachments from the message that you received. These links and attachments can damage your device and your data can potentially be exposed to thieves. 

First and foremost, you'll want to report the message to our Support team. When you reach out to us, be sure to include all of the information from the emails or messages to help us investigate where it originated from. Reporting it in detail will also help us prevent other members from being targeted by these attempts.

Information we will never request:

• Your full credit card number, banking information, or other financial details
• Your password
• Your one-time two-factor authentication (2FA) code
• Click a link to receive funds, verify info, and release or cancel the trade when you are already logged in (you can do that yourself)

Please report it to us immediately if you receive a message requesting any of the above information.

How to spot a phishing link:

While scammers change their tactics frequently, look for these classic signs of phishing or spoofing attempt:

• Make sure there are no spaces on the link provided
• There are no URLs inside the pictures
• There are no links attached to QR codes
• We recommend you to be very cautious with file-sharing links. These can lead to malware or hacking.
• There is no ‘Whatsapp’ or other messengers inside the pictures
• Emails or messages with .html attachments

These links can be shared off-escrow without detection, so always keep your trades in the marketplace.

How to spot a phishing email or chat message:

While scammers change their tactics frequently, look for these classic signs of a phishing or spoofing attempt:

• The user requests for your bank account, username, password, social security number, or identity
• A claim is made that your account is compromised; In such cases, we only send automated messages from “no-reply” email addresses
• Unsolicited email with a link to verify your account information
• There are typos in the email address.
• Suspicious links that don’t lead to our website. Before you enter your login information or click on a link, double-check the URL by copying it into your address bar without pressing Enter
• You receive emails that mimic our design. These emails aim to distract you from any typos in the email address or website links by using pictures and colors similar to our platform.

Ways to Protect Yourself from Phishing Scams: 

• Always report any suspicious activity to our Support team.
• Check if the link, email, or message is actually from our website. We communicate using our official social channels
• Do not click on any links, downloads, or attachments from questionable messages and emails.

For more information on how to protect your account see our security guide.