Credentials
Use a unique password. Do not send a password, one-time code or recovery code to another person, including someone claiming to provide support.
Account Security
Winbox Account Security Checklist
Account security means controlling who can access your credentials, recovery channels and payment instructions. Verify the destination domain, use a unique password, enable additional verification when available and never share one-time codes. If anything looks wrong, stop transactions and secure the linked email account before attempting recovery.
Definition
What Account Security Covers
Account security is the set of choices and controls that protect login credentials, recovery channels, personal information and payment instructions. Before using any Winbox account access information, verify the destination domain. Account security begins before an account is created and continues whenever a user signs in, changes a password, receives a support message or approves a transaction.
Destination
Check the domain before entering information. A familiar logo, page colour or urgent message does not prove that a login page is genuine.
Recovery channels
Protect the linked email account and phone because password resets and login notices may depend on them.
Transactions
Confirm recipient details in the current account payment screen and use the separate payment verification guide.
Login Check
A Safer Sign-in Sequence
- Open a saved or independently verified address instead of following an unexpected message.
- Compare the complete domain, not only the page title or logo.
- Do not continue through a browser warning or unexplained redirect.
- Enter only the credentials required by the normal sign-in flow.
- Enable additional verification if the current account settings provide it.
- After signing in, review recent account or transaction activity when that information is available.
Message Check
Warning Signs in Support and Payment Messages
| Warning sign | Why to pause | Safer response |
|---|---|---|
| Urgency or threats | Pressure reduces the time available to verify a request. | Stop and contact the support channel reached through the verified site. |
| New recipient details | A changed account or wallet can redirect a transaction. | Compare the details with the current payment screen before sending funds. |
| Request for a password or code | Credentials and one-time codes can permit account access. | Do not share them; secure the linked email and phone if disclosure occurred. |
| Different domain | Lookalike addresses can imitate a familiar page. | Close the page and navigate from an independently verified address. |
Response Plan
What to Do If an Account May Be Compromised
- Stop logins and transactions through the suspicious link or device.
- From a trusted device, secure the linked email account first if it may also be exposed.
- Change the account password to a new, unique value and revoke unfamiliar sessions if the setting exists.
- Review profile, recovery, login and transaction details for changes.
- Contact the verified support channel and retain relevant references or screenshots.
- If payment information was exposed, contact the relevant financial provider through its verified channel.
Account security supports, but does not replace, financial limits and wellbeing safeguards. Review the responsible gaming guide when gambling activity itself is causing harm.
FAQ
Account Security Questions
What is the most important account security step?
Use a unique password and verify the destination domain before entering credentials. Reusing a password allows one unrelated breach to affect several accounts.
Should I enable two-factor authentication?
Enable it if the current account settings provide it. Keep recovery codes private and never approve an unexpected login request.
How can I identify a suspicious login or payment message?
Be cautious when a message creates urgency, changes the recipient, requests a password or code, or directs you to a different domain.
What should I do after suspected account compromise?
Stop transactions, use a trusted device to change the password, secure the linked email account, review activity and contact the verified support channel.
Next Step
Review Before You Act
Use the registration and payment checklists before entering personal or financial information.
Continue Reading