Keep these private
- Passwords
- SMS or email one-time codes
- Recovery answers
- Photos of identity documents sent to an unknown contact
A familiar logo is not enough. Check the address and the Android package before you install or sign in.
Look at the domain, not only the logo. Short links can hide a different website.
If you opened Android download, iPhone setup, or login, the next screen should still match that.
Unexpected payment, identity, or accessibility requests are a reason to close the page.
com.mega888.group, and the sender tells you to ignore that.Leave the page. Do not finish an install. Do not send a code “to cancel”. If you typed a password, change it after that session is closed.