What is phishing?

In simple terms, phishing is when someone attempts to obtain sensitive information, such as your username, password, or credit/debit card details, by disguising as a Yellow Card employee to gain access to your account. This is usually done by sending emails or text messages that bear a close resemblance to actual ones from Yellow Card.

To help protect you from falling prey to phishing scams, we will share how phishing works, how to identify phishing emails, texts, Telegram, and social messages, and how to protect yourself.

Email

Note: Only trust emails ending with @yellowcard.io 

Always double-check who the email sender is. It may appear to be coming from "Yellow Card," but you will find that the email address above is not from a sender with a @yellowcard.io email address.  Official communication will come from an email address ending in @yellowcard.io only. Any variation from this may be indicative that the email you received is malicious.

Website

Take note of the URL: web.yellowcards.io. The landing page may look familiar, but the "s" at the end of the yellow card in the URL signifies that this is not web.yellowcard.io. Scammers can create fake websites asking for sensitive information to gain control of your accounts. 

 Yellow Card does not ask for your private information, such as two-factor authentication codes or private keys. If someone claiming to be from Yellow Card asks you for this information, it is a scam.

Note: Utilizing your browser’s bookmark function to access Yellow Card's websites is an excellent way to safeguard any URL typos. 

SMS

If you receive a text message reporting that you’ve withdrawn digital currency that you did not authorize, it is likely a phishing attempt. Yellow Card does not send out texts to verify transactions. Notice that the links here do not direct you to web.yellowcard.io. Do not click these links.

Note: Yellow Card will never ask you for money, to know your password, or to verify transactions. 

Telegram

Yellow Card does not offer official support on telegram, so if an account claiming to support reaches out to you, it's a scam. We will not ask you for money or secure account information. The only official support channels are email: [email protected] and live in-app chat. Also, if anyone tries to add you to another group promising to invest your money or give you returns, please leave and report it. 

Reporting Phishing

Please report any Yellow Card phishing sites you encounter at [email protected].

If you are a victim of a phishing attack, please immediately take action to secure your account by changing your email and Yellow Card password. If you have further questions or suffered a financial loss due to this attack, please reach out to our Support Team.