How to Avoid Phishing and Fake GroveX Sites
Learn how to identify phishing messages, fake login pages, impersonation attempts and other scams targeting exchange users.
What is phishing?
Phishing is an attempt to trick you into revealing account credentials, security codes or other sensitive information.
Attackers may imitate GroveX branding, emails, social accounts, websites or support representatives.
The objective is often to steal login credentials or persuade the user to send assets.
Common warning signs
Be cautious when a message:
- creates artificial urgency;
- claims your account will be closed immediately unless you act;
- asks you to reveal a password or authenticator code;
- asks for a private key or seed phrase;
- sends you to an unfamiliar login domain;
- asks you to install remote-control software;
- promises guaranteed profits or special recovery services;
- asks you to send crypto to 'verify' or 'unlock' an account.
Check the website before signing in
Before entering GroveX credentials:
- inspect the browser address bar;
- confirm you are using the official GroveX domain;
- watch for misspellings or extra words in the domain;
- avoid signing in from links sent by unknown accounts;
- bookmark the official GroveX website and use that bookmark when possible.
A padlock icon alone does not prove a website is genuine. Attackers can also use HTTPS certificates.
Be careful with search advertisements
Fake websites can appear in advertisements or search results.
Do not rely only on the page title or logo. Confirm the domain before entering credentials.
Email and direct-message safety
An attacker can copy logos, wording and signatures.
Treat unexpected security messages carefully, especially if they include links or attachments.
If a message claims urgent action is required, open GroveX directly in a new browser tab instead of using the message link.
GroveX will not ask for wallet secrets
Never provide:
- seed phrases;
- private keys;
- passwords;
- backup codes;
- live authenticator codes for another person to use.
Anyone who obtains these items may be able to take control of an account or wallet.
Social media impersonation
Scammers can create accounts with names and profile images that resemble legitimate GroveX channels or employees.
Do not treat a social media display name as proof of identity.
Never send funds based only on instructions received through a social platform.
If you clicked a suspicious link
If you entered GroveX credentials on a suspicious site:
- change your GroveX password immediately from the official site;
- secure the email account connected to GroveX;
- review account devices and sessions;
- review or reset security settings where necessary;
- review API keys;
- check recent orders and withdrawals;
- contact GroveX Support.
Read How to Review Devices and Sessions on GroveX.
Submit a support request: https://grovexcom-help.freshdesk.com/support/tickets/new