How to Protect Yourself Against Phishing?

As tax season approaches, malicious individuals are attempting to impersonate Waltio to steal information through phishing campaigns. If you receive a suspicious call, message, or email, the first reflex is simple: stay zen. As long as you don’t click on anything and don’t validate any action, your assets and data remain safe.

Best Practices to Adopt 🛡️

To navigate safely, keep these principles in mind:

• Check the security code: Look at the bottom of our emails. You will find a unique code (a list of words) that you can verify in your Waltio profile settings.Pour naviguer sereinement, gardez ces principes en tête :

• Are you receiving a call? Waltio does not have your phone number. If someone calls you claiming to be a Waltio employee, it is a scam. Period.

• Never click in a rush: Received an unexpected link via SMS or email? Do not click it.

• Use your bookmarks: To access Waltio, type waltio.com directly into your browser or use a link you have previously saved.

• Keep secrets secret: Waltio will never ask for your password, 2FA codes, private keys, or recovery phrase (seed phrase).

What is Phishing, exactly ?

Phishing is a fraudulent technique where an attacker poses as a trusted third party (such as Waltio, an exchange’s support team, or your bank) to steal your credentials or trick you into validating a fund transfer. This can happen via phone calls, emails, SMS, or even private messages on social media.

How to Spot a Waltio Impersonation Attempt ?

Certain red flags are unmistakable:

• An alarmist tone: “Account blocked,” “Immediate action required,” “Final notice before closure.”
• Unusual requests: Asking for a code received via SMS or to “confirm” your private key.
• Shady support channels: A so-called “advisor” contacts you on WhatsApp, Telegram, or via an unofficial X (Twitter) account.

What Waltio Will NEVER Ask You

To avoid any ambiguity, we will never contact you to:

• Transfer funds or pay your taxes “via Waltio”: We calculate your taxes, but you are the one who files them on the official government tax website.
• Obtain your platform credentials: (Binance, Coinbase, etc.). We only use read-only API keys or your transaction history files.
• Access your wallet: via your recovery phrase.

How Can I Be Sure an Email is from Waltio ?

This is our secret weapon: the Security Code.

1. Log in to your Waltio account (Profile > Preferences).
2. Find your unique code.
3. Ensure it is present and identical at the bottom of every email we send you.
   
   No code or wrong code = Danger. For more information on Waltio Security.

Most Frequent Scam Scenarios

What Should I Do if I Have Doubts?

You are at no risk as long as you do not validate anything.

1. Do not reply to the message.
2. Do not open any links or attachments.
3. Open a new tab and go to waltio.com.
4. Contact us via the official chat or email: [email protected].

I Clicked a Link or Shared Information: What Now?

Don’t panic: the key is to act quickly, step by step.

• If you entered your password: Change it immediately and enable/strengthen your Multi-Factor Authentication (MFA).
• If you shared a code (Email/SMS/2FA): Consider it compromised; change your access credentials and contact support.
• If you shared a private key/seed phrase: Secure your assets as quickly as possible (e.g., transfer them to a new, secure wallet).
• File a report with law enforcement.
• Contact Waltio: [email protected].

On our end, we strive to report phone numbers and domain names impersonating us. Your vigilance and reports to our support team are essential for everyone’s safety.