> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://kb.secondfi.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Protecting Yourself from Scams

The recent SecondFi incident is an opportunity scammers may try to exploit. Fraudsters create fake apps, fake websites, and fake support accounts designed to steal your funds. This article tells you exactly what to look for and how to stay safe.

**The only official source for the SecondFi app**
Download SecondFi from [**secondfi.io**](https://secondfi.io/) only, or search for "SecondFi" directly in the official **Apple App Store** or **Google Play Store**. Do not download the app from any other link, website, or message.
If you are an existing Yoroi user, your app will **update automatically** through the App Store or Google Play. You do not need to click any link, visit any website, or download anything new. If someone sends you a link to "download the new SecondFi app", it is a scam.

**What SecondFi will never do**
* SecondFi support, staff, partners, or community members will **never** ask you to provide your recovery phrase through email, direct message, chat, telephone, screen sharing, or any website other than the official recovery flow available at secondfi.io. 
* SecondFi will **never** send you a direct message (DM) with a download link on any platform, including Telegram, X (Twitter), Discord, or WhatsApp.
* SecondFi will **never** ask you to transfer funds to "verify" your wallet or "activate" a new feature.
* SecondFi will **never** contact you first to offer support — all support is initiated by you through the official KB or chat assistant.

**How to spot a fake SecondFi app or website**
1. **Check the URL carefully.** The only official website is secondfi.io.
2. **Check the app developer name.** In the App Store and Google Play, the developer name should be **EMURGO**. If it shows a different developer, do not install it.
3. **Be suspicious of urgency.** Scam messages often create a false sense of urgency — "Your wallet will be deactivated", "Claim your airdrop now", "Verify your account immediately". SecondFi will never pressure you to act immediately.
4. **Verify social accounts.** Only interact with SecondFi on verified official social media accounts. Check for the verified badge and confirm the handle matches the official accounts listed on secondfi.io.

**What to do if you suspect a scam**
If you believe you have encountered a fake SecondFi app, website, or social media account:
1. **Do not enter your recovery phrase or any wallet credentials.**
2. **Do not send any funds.**
3. Report the fake app or website to the relevant platform (App Store, Google Play, or the hosting provider).
4. Use the chat assistant on this page to report the incident to the SecondFi team.
**If your recovery phrase has already been compromised**, move your funds to a new wallet immediately.

![](https://storage.crisp.chat/users/helpdesk/website/-/c/8/f/5/c8f55fdc3aec2000/appstore-listings_o69q6b.png =411x400)