> ## Documentation Index
> Fetch the complete documentation index at: https://docs.roxom.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Impersonation and phishing

> How to identify impersonation scams, recognize phishing attacks, and verify that you're communicating with the real Roxom.

## Someone contacted me claiming to be from Roxom

### How do I know if it was really Roxom?

Roxom communicates through three official channels only:

* Email from **@roxom.com** domains
* In-platform notifications
* Social media accounts linked directly from [roxom.com](https://roxom.com)

Anything outside these three, a message on Telegram, WhatsApp, or Discord, a phone call, or a direct message, should be treated as suspicious until you verify it from [roxom.com](https://roxom.com).

### What would Roxom never ask you to do?

* We will **never** ask for your OTP codes or attempt to authenticate into your account on your behalf
* We will **never** ask you to transfer funds to an external wallet to "protect" or "verify" your account
* We will **never** pressure you to act immediately because your account is "at risk"

If a message does any of these things, it's not from Roxom.

### I already responded, what should I do?

1. **Stop responding** to the contact immediately
2. If you shared authentication codes, go through the [account compromise steps](/help-center/security-guides/account-compromised) right now
3. Take a screenshot of the full conversation
4. Submit it through the [suspicious activity form](https://form.jotform.com/260984835353063)

If the impersonation happened on a social media platform, report the account there as well.

***

## I think I was phished

### What is phishing?

Phishing is when someone tricks you into completing an authentication flow on a fake website or handing over your OTP codes through a message. It's the most common attack in crypto because it doesn't require any technical skills, it just exploits a moment of distraction.

### How do I know if it happened to me?

Did you click a link from an email, social media post, or message and then authenticate somewhere? Check the URL you landed on. Attackers register domains that look almost identical to the real one, a single character difference is enough.

<Warning>
  Examples of fake domains: `r0xom.com`, `roxom-exchange.com`, `roxorn.com`. If the URL wasn't exactly `roxom.com`, you may have been phished.
</Warning>

### How to always reach the real Roxom

* Type `roxom.com` directly into your browser, don't click links
* Verify the URL begins with `https://` and shows exactly `roxom.com`
* Bookmark it once confirmed and use that bookmark going forward

<Tip>
  A [Passkey](/help-center/security-access/how-to-secure-my-roxom-account) is your strongest defense against phishing. It's tied to the real `roxom.com` and won't work on a lookalike site, so it can't be entered or stolen on a fake domain.
</Tip>

### What to do if you were phished

1. Go through the [account compromise steps](/help-center/security-guides/account-compromised) immediately
2. Report it through the [suspicious activity form](https://form.jotform.com/260984835353063)

***

## Related articles

<CardGroup cols={2}>
  <Card title="My account was compromised" href="/help-center/security-guides/account-compromised">
    Steps to take if you suspect unauthorized access.
  </Card>

  <Card title="Fraud and prevention" href="/help-center/security-guides/fraud-and-prevention">
    Common crypto scams and how to protect yourself.
  </Card>
</CardGroup>