01

Check an address, not just a logo

A copied brand image can make an unrelated page look familiar. Inspect the full domain before entering information, particularly after following an advert, short link or private message.

For “is 1Win real or fake”, separate the brand question from the exact website or app in front of you. A genuine brand can still be impersonated by a fraudulent page.

Two browser windows with link and external-arrow symbols beside a small shield
02

Protect login details and recovery codes

Use a unique password and any suitable authentication controls. Keep recovery details current and avoid signing in on devices you cannot trust.

No one helping with an account needs your password, mobile-money PIN or one-time code. Be especially careful when an unsolicited message creates urgency or promises a bonus for sharing access.

Purple shield, padlock and gold key beside a checklist
03

Payment scams and withdrawal promises

Check payment instructions inside the verified transaction flow. Do not reuse merchant details taken from comments, old images or messages from a person claiming to be an agent.

A demand to send money to a private number to unlock a withdrawal is a warning sign. Inspect the account status and applicable requirements through the platform’s own verified tools.

Open vault door with identity, document and lock symbols
04

Submitting documents safely

Identity information should be handled through the verified account process. Check the purpose and destination before uploading a document or financial record.

A request may be genuine without every requested channel being safe. Stop if an alleged reviewer asks for a password, remote-control access or unrelated confidential information.

Magnifying glass and shield over a document with check marks
05

If account access may be compromised

Secure the associated recovery account, change exposed credentials through a verified route and review recent account activity. Use a trusted device when doing so.

Preserve transaction references and suspicious messages. Do not pay a second person who promises guaranteed recovery of money or access.

  1. Stop interacting with suspicious contacts: Do not provide additional passwords, verification codes or payment information.
  2. Secure your account: Use the provider's verified recovery process and change exposed credentials where possible.
  3. Check related accounts: If the same password was used elsewhere, replace it with unique credentials.
  4. Contact official support: Report the suspected compromise through verified channels and ask about available account protection measures.
  5. Review financial activity: Check for unfamiliar transactions and contact your payment provider if necessary.
  6. Preserve evidence: Save suspicious messages, URLs and transaction references without publishing sensitive information.
Document, pencil and magnifying glass highlighting a crossed-out entry

Security reference

General guidance on recognising suspicious messages and websites.