How to Protect Yourself Against Phishing Emails

Phishing is when someone sends a fake message pretending to be Flush.io, hoping to trick you into handing over your login, your 2FA code, or your funds. The good news: once you know the signs, phishing is easy to spot and avoid. Here is how to stay safe.

The one rule that stops most attacks

If a message is pushing you to reveal any of those, you can stop right there: it is not genuine.

Red flags to watch for

Urgency or threats. Messages that pressure you to act immediately, or warn your account will be closed, are a classic tactic to make you act without thinking.

Links to lookalike sites. A link may lead to a fake page that copies Flush.io to capture your login. Check the address carefully, and when in doubt do not click.

Requests for sensitive details. Any request for your password, codes, or recovery phrase is a red flag on its own.

Odd sender addresses or spelling. Misspellings, strange sender addresses, and unexpected attachments are common giveaways.

How to stay safe

Go to the site directly. Rather than clicking a link in an email, type the official Flush.io address yourself or use a bookmark you saved.

Check before you log in. Always confirm you are on the real Flush.io site before entering your details.

Turn on 2FA. Two-factor authentication means that even if a password is ever phished, your account stays protected.

When in doubt, verify. If an email seems to be from us but feels off, do not act on it. Contact support through the official site to check whether it is genuine.

Good to know

Report suspicious emails. If you receive a message pretending to be Flush.io, let our support team know through the official site so we are aware of it.

Phishing targets people, not systems. These attacks work by tricking a person, which is exactly why a moment of caution is your best defence.

The same care protects everything. The habits here keep your email, your wallet, and every other account safer too, not just Flush.io.