How to Protect Yourself from Phishing Attacks

1. What is a phishing attack? Phishing attacks are a common form of online fraud, where someone uses various means to create a URL and webpage content similar to a legitimate website, and spreads false URLs through social media such as text messages and emails, leading users to click and then steal their personal information such as bank accounts, credit card accounts, and passwords to gain access to their assets.

Phishing attacks can sometimes be hard to distinguish. So, how can investors guard against such fraudulent activities? This article will summarize several common phishing tactics and provide some safety tips for our customers. Please pay attention to these techniques to protect your asset security.

1. Common tactics of phishing attacks Phishing attacks mainly include email attacks and domain spoofing. Email attacks: Attackers send enticing or misleading emails to target users. The emails often contain links to phishing websites or links to download Trojan programs. If users are not careful to distinguish, they will click on the links to enter the phishing website or download the Trojan program. Once the Trojan program runs, it can monitor and capture the user's input of sensitive information. Pharming: Attackers exploit vulnerabilities in the user's computer system, modify the DNS information file stored in the user's computer with malicious code, and replace the website address that the user originally wanted to visit with the address of a phishing website. After entering the legitimate URL in the browser, the user will automatically be redirected to the phishing website. If the user does not realize this, the attack is successful.

In the common phishing scams in the crypto field, attackers may pretend to be platform staff, create phishing websites, publish false information, and claim "account upgrades", "migrations", "refunds", "triggering risks" through SMS, emails, etc., to induce users to click on phishing website links or scan phishing QR codes, control, manage funds risk, close accounts, etc. Once the account password and other information are leaked, the assets in the user's account will be quickly transferred.

1. How to prevent phishing attacks

(1) Do not click on unknown links and log in to insecure websites to avoid the leakage of account passwords and asset loss.

(2) Protect account security information and authentication methods, such as account login names and passwords should not be the same as other websites, private keys, and mnemonic phrases should be kept confidential.

(3) Do not search for the SAFEX website through Google or other search engines and log in without careful inspection. It is recommended to manually enter the SAFEX official website:

(4) Do not enter sensitive information such as account numbers and passwords in an insecure environment or disclose account information to others, especially security-related information such as passwords and private keys.

(5) SAFEX has launched an anti-phishing code feature. You can set up an anti-phishing code in "User Center - Security Center - Anti-Phishing Code". After setting the anti-phishing code, the emails sent by SAFEX will contain the anti-phishing code you set. If there is no anti-phishing code in the email, it is a forged or fraudulent email.

(6) Whenever you find a text message or email suspicious, you are welcome to contact our support center at any time to verify the authenticity of the message, and we will be available 24 hours a day to assist you.