Access your account securely. For best protection enable 2‑factor authentication and verify all emails and links before clicking.
Export transaction history & tax docs before platform changes.
Use an authenticator app (recommended) rather than SMS when possible.
Always type the URL yourself and never share your recovery codes.
Watch for communications from official agents and verify domains.