Read the Full Domain
Check every letter carefully. Look for extra words, missing letters, unusual symbols or an unfamiliar domain ending.
Learn how to protect your account, identify suspicious websites, avoid phishing links, secure personal information and respond correctly when unusual account activity occurs.
ACCOUNT PROTECTION
Online accounts may contain personal information, contact details, transaction records and other sensitive data. Users should therefore check every website carefully before entering a username, password, verification code or payment information.
Security does not depend on one setting alone. A safer account requires a strong password, a trusted device, careful link checking and immediate action whenever suspicious activity is detected.
WEBSITE VERIFICATION
Fake or misleading websites may use similar names, copied images or slightly different domain spellings. Always inspect the full address before entering account information.
Check every letter carefully. Look for extra words, missing letters, unusual symbols or an unfamiliar domain ending.
A secure connection normally uses HTTPS. However, HTTPS alone does not prove that a website is official or trustworthy.
Save the correct website address in your browser instead of searching for it again every time.
Stop immediately if a link redirects through several unknown domains or opens an unrelated login page.
SCAM PREVENTION
Phishing is an attempt to persuade users to reveal passwords, verification codes, personal details or payment information through misleading websites, messages or calls.
A message claims you won a reward even though you did not enter any promotion.
The sender threatens to suspend your account unless you click a link immediately.
An unknown person asks for a one-time password, TAC or account verification code.
Someone asks you to install a remote-control application or share your device screen.
Payment details suddenly change or the recipient name does not match the expected information.
A website forces an unexpected application, browser extension or unknown file download.
PASSWORD PROTECTION
A strong password should be difficult for another person to guess and should not be reused across multiple websites.
PHONE PROTECTION
Install operating-system and security updates to fix known vulnerabilities.
Protect the device with a PIN, password, fingerprint or facial recognition.
Avoid accessing sensitive accounts through open public networks.
Do not install unknown applications from links sent through random messages.
Remove unnecessary access to contacts, messages, files, camera or screen recording.
Log out when using another person's phone or any shared device.
PRIVACY
Screenshots and chat messages can accidentally reveal sensitive information. Review all content carefully before sending it to another person.
A password should remain private even when another person claims to provide account assistance.
Verification codes may allow another person to approve access or a transaction.
Hide usernames, balances, phone numbers and transaction details before sharing an image.
Only provide required documents through the correct verified process.
IMMEDIATE ACTION
Act quickly if you notice an unknown login, changed account information, an unfamiliar transaction or a password-reset message that you did not request.
Create a new password from a trusted device and secure internet connection.
Review the registered phone number, email address and other account details for unauthorised changes.
Look for unfamiliar logins, payment records or account actions.
Use the support link available from the correct website instead of replying to an unknown message.
Change other passwords immediately if the same password was used elsewhere.
COMMON QUESTIONS
No. HTTPS protects the connection between your browser and the website, but a misleading website may also use HTTPS. Check the full domain name and source of the link.
Do not provide verification codes to unknown people. These codes may approve account access or transactions.
Close the page, do not enter information, remove unexpected downloads and change your password if account details were entered.
Reusing passwords increases risk. If one service is compromised, another person may try the same password on your other accounts.
A trusted private connection is preferable when accessing account or financial information.
Do not install remote-access software or share your screen with an unknown person. End the conversation and use the correct support channel.
BBJ888 SECURITY
Check the website address, keep passwords private and stop immediately whenever a message or payment instruction appears suspicious.