Bit2Me Security Alert: How to Protect Yourself from Phishing and Fraud

At Bit2Me, the security of your account is our top priority. Unfortunately, in the digital ecosystem, phishing attempts (identity theft) are common. These attacks seek to steal your login data or funds by posing as our company.

Below, we explain how these frauds work and, most importantly, what measures you can take to protect yourself.

• What is Phishing and how does it affect you?
• The 6 golden rules to identify and avoid fraud
• What should you do if you click on a suspicious link?

What is Phishing and how does it affect you?

Phishing is a fraud technique where attackers send communications (emails, SMS, chat messages) that look legitimate, imitating the visual identity and language of Bit2Me. The main objective of these frauds is for you to click on a malicious link or enter your credentials (password, 2FA codes) on a fake website.

The 6 golden rules to identify and avoid fraud

To secure your account, you must know Bit2Me's communication patterns and take the following into account:

1. Verify the email address: The most important indicator of authenticity is the sender's domain.
   • OFFICIAL: Bit2Me communications always come from verified official domains, such as @bit2me.com.

   • SUSPICIOUS: Domains with spelling mistakes or slight modifications.
     
     

2. Analyze the links: Before clicking on any link, hover your mouse over it (without clicking)!:

   • OFFICIAL: The URL must direct you to the main domain: https://www.bit2me.com/ .

   • SUSPICIOUS: Any link that directs you to a URL other than the main domain (e.g. bit2me.xyz/login).

   • Tip: If in doubt, DO NOT CLICK. Instead, open your browser and manually type www.bit2me.com to log in securely.
     
     

3. Urgency is a fraud tactic: Phishing attacks often try to create panic or urgency so you act without thinking:

   • SUSPICIOUS: Messages saying "Your account has been blocked" or "Your balance will be suspended in 2 hours".
     
     

4. Never share your credentials or 2FA codes: Bit2Me will never request sensitive information by email, SMS, or call:

   • SUSPICIOUS: We will never ask for your password, your recovery phrase (seed), or your Two-Factor Authentication (2FA) codes by any external means.

   • Key Tip: If you receive a 2FA code or a verification code that you DID NOT request, ignore the message. It is a sign that someone is trying to access your account. Do not click on any link attached to that message.
     
     

5. Use Bit2Me Verify for source confirmation: If a representative, partner, or external source claims to be Bit2Me, you can and should verify their authenticity:

   • KEY STEP: Confirm the authenticity of the source in question by using Bit2Me Verify at https://bit2me.com/en/verification.

   • Important: Ensure it is an authorized representative of Bit2Me. Avoid interacting with unauthorized or unverified sources, and do not share your account details with them.
     
     

6. Only official contact channels: Only use secure and verified channels to access and contact Bit2Me:

   • OFFICIAL: Always use the official website (www.bit2me.com) and the official Bit2Me mobile application.

   • OFFICIAL: If you need further help, do not hesitate to contact Bit2Me's assistance team through the support chat available on our web or app.

What should you do if you click on a suspicious link?

Actions you can take immediately:

• Change your Password: If you have the slightest suspicion of having entered your data on a fake site, change your password immediately on the official website.
• Activate 2FA: Make sure you have Two-Factor Authentication (2FA) active on your account. It is the most important layer of security.
• Report Phishing: If you receive a suspicious email, forward it to our security team so we can investigate it and block the attacker.