Skip to main content
All CollectionsHana CardSecurity & Fraud Prevention
How to identify and respond to phishing or scams
How to identify and respond to phishing or scams

Learn how to recognize phishing attempts and scams, protect sensitive information, and secure your account if you suspect unauthorized access.

Lachlan avatar
Written by Lachlan
Updated over a month ago

What should you do if you suspect phishing or a scam?

If you suspect you have encountered a phishing attempt or scam, follow these steps:

  1. Do not engage with the sender:

    Avoid clicking any links, downloading attachments, or responding to the message. Phishing attempts often come through emails, text messages, or phone calls claiming to be from legitimate sources.

  2. Never share sensitive information:

    Remember, legitimate services will never ask for sensitive information such as:

    • Private keys

    • Card details (e.g., full card number, CVV)

    • Account passwords or one-time passcodes (OTPs)

    • Personal identification numbers (PINs)

    If you receive any requests for this type of information, it is likely a phishing attempt or scam.

  3. Verify the legitimacy of contact:

    If you’re unsure whether the communication is from a legitimate source:

    • Avoid responding to the message or call.

    • Contact our support team directly using the contact details provided in the app or on the official website, rather than using any links or numbers in the suspicious message.

    • Check with our support team to confirm whether the message was an official communication.

  4. Report the phishing attempt:

    Report any suspicious messages or calls. If the phishing attempt involved your service or brand, contact our support team immediately with the details.

  5. Check your account for suspicious activity:

    Log into your account and review recent transaction history for any unauthorized charges or unusual activity. If you notice anything suspicious, cancel your card immediately.

  6. Reset account credentials:

    If you clicked on any links or shared sensitive information, reset your password immediately and enable two-factor authentication (if applicable) to secure your account.

Did this answer your question?