Impersonation
Watch for altered domains and urgent messages. Verify through your saved address.
baji game: Account security
Good security habits connect warning signs to specific actions. Separating addresses, credentials and devices helps identify the source of a risk.
Three risk categories
The distinctions below help explain this subject. Consider the conditions alongside the situation.
Reused passwords
A breach elsewhere can affect reused credentials. Keep each service's password distinct.
Shared devices
Autofill and sessions may preserve access. Log out after use.
Responding to a warning
Stop interacting
Stop sharing information with the unfamiliar form or message.
Use a trusted route
Use a trusted device and verified service to change credentials.
Document the incident
Record the time, address and message, then report it to relevant support.
Separate layers of security
A password protects account identity but can be exposed at a wrong address. Read the domain before entering it. A logo or lock icon alone does not prove service identity.
A one-time code remains confidential even though it expires. Match the message to your own action. A support claim does not justify sharing it.
Device updates and screen locks support everyday protection. Unknown apps or remote-control permissions can add risk. Do not hand over device control to solve an account problem.
If exposure is suspected
Change credentials through the relevant service on a trusted device. Replace the password elsewhere if reused. Check that recovery contact details remain under your control.
Use the actual provider's verified contact for incidents involving funds or identity documents. Preserve evidence before deleting messages. Mask sensitive details in content enquiries here.
Questions about this topic
Is a lock icon enough?
No. The domain and service identity also need checking.
Are short-lived codes confidential?
Yes. They may grant access while valid.
One password for everything?
No. Use distinct passwords.
How should I send a screenshot?
Mask identity, codes and financial secrets, leaving the error visible.