General Security Tips

Following good security practices can significantly reduce the risk of account takeover and other scams.

Use unique passwords.

Never reuse your StraitsX password for your email account or another service. Consider using a reputable password manager to generate and securely store unique passwords.

Enable Two-Factor Authentication (2FA). 

2FA provides an additional layer of security beyond your password. Enable it on your StraitsX account and other important accounts, particularly your primary email account.

Never share OTPs or authentication codes. 

Treat OTPs, 2FA codes, passwords, recovery codes, and authentication links as confidential. Do not share them with anyone.

Protect your email account. 

Your email can be used to reset passwords for many other services. Secure it with a strong, unique password and multi-factor authentication.

Check before you click. 

Be cautious of links and attachments received unexpectedly. When possible, navigate directly to the official website instead.

Be suspicious of urgency. 

Scammers frequently use threats, deadlines, account restrictions, or promises of financial gain to pressure victims into acting quickly.

Verify requests independently. 

If someone claims to represent StraitsX, law enforcement, or another organisation, verify the request using independently obtained official contact information.

Monitor your account. 

Review your account activity regularly and investigate transactions, login notifications, or account changes you do not recognise.

What should I do if I think I've been scammed?

If you believe your StraitsX credentials may have been compromised, notice activity you do not recognise, or suspect that you have interacted with a scammer, login and activate the Kill Switch immediately, then contact StraitsX Customer Support through our official support channels as soon as possible.

If your email account may also have been compromised, secure your email account immediately and review other accounts connected to the same email address.

Where appropriate, you should also report suspected scams or fraudulent transactions to the relevant law enforcement authorities.

Remember: Scammers may know personal information about you and may use convincing websites, profiles, documents, or messages. Always independently verify unexpected requests before sharing information, accessing links, or transferring funds.