CRYPTO-SECURITY · EN · FREE

2. Accounts, phishing and false urgency

Protect the access chain

Email is often used to recover other accounts. Use different long passwords, keep them in a reliable password manager, enable available multifactor authentication and review active sessions. Prefer phishing-resistant sign-in methods where supported. An authenticator or SMS code is also a secret and can be tricked out of you. Do not approve an unexpected sign-in request merely because it carries a familiar logo.

Update your system and wallet from a verified source. Do not install an extension sent in a direct message or give a stranger remote access. When support is needed, independently open the official website, find its help channel and verify the contact there. A name, avatar, verified account or large following does not individually prove that a message is genuine.

Check the purpose of the action

HTTPS indicates an encrypted connection, not an honest site operator. Check the full domain after following a link, rather than the label on a button. Advertisements and top search results can lead somewhere unexpected. A saved bookmark is useful only if its original address was verified.

Scenario exercise A

An “admin” contacts you first: “Your certificate is ready. Enter your recovery phrase on the verification page within five minutes or lose the bonus.” Choose your action and name two warning signs.

Explanation: stop, enter nothing, verify through an independently found official channel and report the impersonation. Warning signs include requesting a secret, unsolicited contact and deadline pressure. A LOGRI certificate never requires your recovery phrase or access to funds. Refusing this action successfully completes the exercise; it is not a missed opportunity.