Security

Contacted by someone claiming to be DefCrypt? Check their details

A phone beside a laptop on a desk
In brief

If someone contacts you on behalf of DefCrypt, check their contact details before sending documents or discussing payment. Our contact verification page accepts Telegram, phone numbers, email addresses and website domains. A name or logo alone does not establish that a person represents our team.

Why a name and logo are not enough

You submit a request and receive a message from a ‘DefCrypt manager.’ A response may be expected, but the familiar name does not identify the sender: profile names, photos and signatures can be copied.

A similar username or an email with one extra letter is a different contact. Knowing the subject of your request is not a substitute for verification. Read more about our team and approach on the About page.

How to check the sender: four steps

  1. Open defcrypt.com/en/verify yourself, rather than a page supplied in a suspicious message.
  2. Copy the contact from the sender’s profile, email details or call history.
  3. Paste it into the single field and select Verify. The format is detected automatically.
  4. Read the result. If you are unsure, contact us again through the website.
  • Telegram: use the @username or profile link of the person who messaged you, not their display name.
  • Email: expand the sender details and copy the full address, not the name ‘DefCrypt.’
  • Phone: include + and the country code.
  • Website: copy the address from the browser bar; the domain is checked.

For Telegram, do not simply copy a link supplied in the conversation. Someone can link to a real account while messaging you from a different profile.

What the result means

Official contact: the value you entered is in our list. The result includes a button to open that contact and start communicating directly.

Contact not found: the system has not confirmed that the contact belongs to DefCrypt. Pause document sharing and payments; use the website form to ask who contacted you. This result alone is not proof of fraud.

Verification unavailable: no result was obtained. Try again later or contact us through the website. If the format is not recognized, check that you copied the complete contact.

A match does not establish who is behind the screen, authenticate an incoming call or guarantee that an account has not been compromised. For websites, only the domain is checked, not the page content.

Requests that deserve a second check

DefCrypt does not ask for seed phrases, private keys, passwords or 2FA codes. Do not send them to someone just because their profile carries our logo.

Stop and check if you are pressured to send money to an unfamiliar address, promised a guaranteed recovery or told to act without discussing the terms. Confirm the purpose and terms of any payment through a verified channel.

If you have already shared information or sent funds, preserve the conversation, sender details, timestamps and transfer information. Do not share secrets again. If the incident is ongoing, describe it for an urgent assessment.

If you are still unsure

Open the website yourself and use contact verification or the enquiry form. Explain who contacted you, where the message arrived and what they asked you to do. Wallet secrets are not needed for an initial clarification.

Check both the contact and the conversation. A confirmed address helps you choose a communication channel; it does not replace careful consideration of the sender’s requests.

Limitations

Risks and limitations

  • Profile names, photos and signatures can be copied.
  • A link in a message may point to a different, genuine account.
  • A positive result applies only to the contact you entered.
Sources

Sources used

Next

Related resources

ServiceEmergency response← Back to the blog
Free initial assessment

Describe what happened

Answer a few questions so we can assess the situation and suggest the next steps.

Do not send seed phrases, private keys, passwords, or 2FA codes. They are not needed for an initial assessment.

in US dollars
transaction hash, not a seed
0 / 2000

Do not send seed phrases, private keys, passwords, or 2FA codes.