Skip to main content

Security and verification

This page is the quick route for suspicious messages, lookalike domains and impersonation checks.

Before you act

Verification checklist

Check the sender

Genuine email should come from an official group domain, not a free mailbox or lookalike.

Never share full credentials

The group will not ask for a full banking password or one-time passcode.

No personal chat migration

Do not move account conversations to personal messaging apps.

No upfront release fee

Do not pay a fee to release a loan on the instruction of an unverified message.

Security contact

Report a concern

Forward suspicious messages to [email protected] without clicking links in the original message. Include the sender, the domain, the time received and any reference number shown.

If you have already acted on a message you now doubt, use the support route as well so the account team can triage it.