---
title: "Protect your RedotPay account and spot scams"
description: "Set up a passkey, Google Authenticator and an anti-phishing code, recognise the scams RedotPay users meet (fake support, unlock fees, fake airdrops, P2P tricks), and what to do in the first minutes if your account is at risk."
---

> Documentation Index
> Fetch the complete documentation index at: https://redotdocs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Protect your RedotPay account and spot scams

Most money lost on RedotPay isn't taken by hackers breaking in. It's sent by users who were talked into it. Ten minutes of setup and one rule protect you from almost all of it.

> **The one rule**
>
> RedotPay will never ask you to send crypto to "unlock" funds, claim a bonus, pass a "security test" or move money to a "safe" address. It will never ask for your password, verification codes, PIN, recovery phrase, or full card number and CVV. Anyone who does is a scammer, whatever logo they show.

## Set up your account in ten minutes

Open **Profile** → **Security**.

Then limit what a stolen card number can do. Under **Card** → **Settings** → **Security settings**, switch off what you don't use.

If Google Authenticator codes keep failing, set your phone's date and time to automatic.

## Security changes come with a 24-hour pause

After you reset your password or change your email or phone number, RedotPay pauses withdrawals, transfers to other users and currency conversions for 24 hours, and caps card spending at 1,000 USD. Changing Google Authenticator lowers the card limit to 1,000 USD for 24 hours too. If you didn't make the change, act at once: see below.

Five wrong passwords lock the account for 24 hours and trigger an email alert. The card keeps working.

## The scams RedotPay users meet

| What you see | What it really is |
|---|---|
| "RedotPay support" messages you on WhatsApp, Telegram or X | Fake. Support is the in-app chat, where official messages carry a badge, and email from **@redotpay.com** |
| Your funds are frozen and someone can release them for a fee | Fake. Nobody can unlock a review for money. See [money held for review](/en/troubleshooting/funds-on-hold/) |
| An airdrop or bonus if you deposit first, such as 500 USDT for 1,000 | Fake. Real promotions are under **Benefits** in the app |
| A "stress test" wallet that pays 10% for sending 1,000 USDT | Fake |
| Email from addresses like @redotpay-support.com or @redotpay.vip | Fake. Real emails come only from @redotpay.com and show your anti-phishing code |
| A link to "verify your account" or "avoid suspension" | Phishing. Type redotpay.com yourself, and install the app only from the [App Store](https://apps.apple.com/app/id6449689356) or [Google Play](https://play.google.com/store/apps/details?id=com.redotpay) |
| A website asks you to connect your wallet and approve a transaction | It can drain the wallet. Approve only on sites you trust |
| Guaranteed returns, or someone offering to convert your crypto outside the app | Fake |

Verification codes can arrive by WhatsApp or Telegram. Those are one-way messages. Nobody from RedotPay will chat with you there.

### P2P tricks

When you sell on P2P, the buyer's money must be **in your bank account** before you release the crypto. Check in your own banking app, not on a screenshot or an SMS.

- **Fake proof of payment**: an edited screenshot or receipt.
- **Fake SMS**: a text that looks like your bank's.
- **Refund trick**: money from someone else's account or a cheque that later bounces, followed by a "refund" request.
- **Off-platform deal**: the trader moves you to Telegram or WhatsApp, where RedotPay can't protect you.

More in [buying USDT on P2P](/en/deposits-withdrawals/p2p-local-currency/).

## If you think your account is at risk

- Disabling the account needs a verification code. Enabling it again needs a face scan. Deleting it for good is a different, 15-day process: see [delete your account](/en/security/delete-account/).
- **Lost your phone?** Use your Google Authenticator backup key on a new phone. If you've lost access to your email or phone number too, contact support.
- **Unknown card payment?** See [a charge you didn't make](/en/troubleshooting/unauthorized-charges/).

## Report a scam

Save the scam email as an **.eml** file ("Download message" or "Show original" in your mail app) and submit it, with screenshots, on RedotPay's [official verification page](https://www.redotpay.com/verification). Then tell support in the app, with the scammer's addresses, links and account names. See [contacting support](/en/troubleshooting/contact-support/).

Sources: RedotPay help-centre articles "How Do I Secure My RedotPay Account?", "How Do I Set Up Google Authenticator?", "How to Set Up a Passkey", "How to set up the Anti-Phishing Code" and "Common Scams and How to Avoid Them" (checked 31 Oct 2026).

Source: https://redotdocs.com/en/security/protect-your-account/index.mdx