Dear Poloniex Users,

At Poloniex, your security is our top priority. We're reminding you to stay vigilant and take proactive steps to protect your account from phishing and fraudulent attacks. Understanding these threats is key to preventing asset loss.

1. What is phishing?

Phishing is an attempt by cybercriminals posing as legitimate entities—such as Poloniex staff, customer support, or system administrators—usually via email, to obtain sensitive information such as usernames, passwords, assets, and identity details from targeted individuals.

2. Common phishing attacks

• Malware phishing

Criminals create convincing fake Poloniex websites and spread the links to your computer or search engine results through malware, pop-ups, or browser hijacking. These sites are designed to steal your login credentials, transaction details, and even your funds.

• SMS phishing

Cybercriminals use fraudulent SMS messages claiming to be from Poloniex about compromised accounts or prize winnings. These messages urge users to quickly log in to a specified website for identity verification, which is actually a phishing site designed to steal personal information.

• Website spoofing

Criminals first create a fake website, then promote fraudulent event information on social media platforms like Telegram, WeChat, or via suspicious links. These events often promise easy rewards to lure users. Once a user logs into the fake site, their account credentials are stolen by the attackers.

• Email spoofing

Fraudulent emails may claim to be from Poloniex regarding system upgrades, prize announcements, or urgent actions. These emails usually contain phishing links to a fake site that closely resembles the official Poloniex page. Once users enter their login credentials, the information is stolen.

• Be cautious of links shared in community groups or forums. Clicking and logging in on these pages can lead to account theft.

3. How to protect yourself from phishing

• Use a secure browser, such as Google Chrome, and keep it updated.
• Install antivirus software and regularly scan your devices for malware.
• Install the latest security patches for your operating system.
• Before logging in or performing trades, ensure you're on the official Poloniex website: Poloniex.com.
• Be cautious of installing unfamiliar browser extensions.
• Never click suspicious links. Don't enter your Poloniex credentials on unfamiliar websites to avoid information theft.
• Never share your account credentials or personal information on social media or with anyone else.
• Never share your official verification codes or 2FA codes with anyone.

We are unwavering in our priority for user asset security. Our security team continuously enhances security management including real-time security upgrades to counteract emerging threats. Please make sure to use the only official Poloniex website: Poloniex.com. If you have any questions, feel free to contact our official support team at support@poloniex.com.

Poloniex Team

April 23, 2025