Fake customer service often creates urgency to elicit your information
Fake customer service and phishing links usually do not require direct attacks on devices but instead make you believe your account is in trouble, that action is time-sensitive, or that customer service is assisting you. As long as you input your password, verification code, or backup code on a fake page, they may take over your account.
When asked to act immediately, step away from the original message
Phrases like 'Complete verification within 24 hours', 'Your account will be suspended', 'Violation of platform rules', and 'Permanent deletion' typically aim to shorten your judgment time. If you encounter such messages, do not click on the links; instead, check through the official app or manually enter the official URL to see if there is indeed a notification.
Any customer service requesting verification codes is untrustworthy
Passwords, SMS verification codes, two-factor authentication codes, and backup codes are all data for you to log in or recover your account. Genuine platform customer service usually does not request this information via private messages. If they claim it's merely for identity verification, lifting restrictions, or a security code, consider it a high risk.
The URL is more important than the page appearance
Phishing pages can mimic official colors, logos, and login forms, and they can also feature the HTTPS lock. Before inputting data, look at the actual main domain, paying attention to misspellings, overly long subdomains, shortened URLs, and domains that appear official but do not belong to the official site.
Confirm even accounts from acquaintances
Even friends’ accounts may have been hacked. Links for voting assistance, account verification, photo misuse, prize claiming, etc., should be confirmed through other channels, even if they come from acquaintances. Do not log in or download files just because the profile picture and name are familiar.
If information has already been entered
If you haven’t entered any information, close the page and check at the official entrance. If you have entered a password or verification code, you should immediately change your password on the official platform, log out of other devices, enable or reset two-factor authentication, and check whether your recovery email, phone number, and third-party authorizations have been altered.
Fake customer service primarily exploits fear and trust. As long as you bring the processing entry back to the official app or official website and do not give your verification code to anyone, you can block the majority of phishing processes.