ChatRefillChatRefill

Security advisory center

Security Advisories

Stay secure with expert tips on potential risks and learn how to protect your data.

Security first

Expert security advice

Your security is our top priority. Follow these expert guidelines to ensure a safe and secure experience with ChatRefill.

Create strong, unique passwords

Critical
  • Use at least 12 characters with uppercase, lowercase, numbers, and special characters
  • Never reuse passwords across different accounts or services
  • Consider using a reputable password manager like 1Password, Bitwarden, or LastPass
  • Change your password immediately if you suspect any compromise
  • Avoid using personal information like birthdays, names, or common words

Do

  • Use passphrases like "Coffee$Rain2024!"
  • Enable password autofill from secure managers

Don't

  • Use "password123" or similar
  • Write passwords on sticky notes

Enable two-factor authentication (2FA)

Critical
  • Enable 2FA on your ChatRefill account for an extra security layer
  • Use authenticator apps (Google Authenticator, Authy) instead of SMS when possible
  • Save backup codes in a secure location in case you lose device access
  • 2FA protects your account even if your password is compromised

Do

  • Use authenticator apps
  • Keep backup codes safe

Don't

  • Share verification codes
  • Disable 2FA for convenience

Recognize phishing attempts

Critical
  • ChatRefill will NEVER ask for your password, PIN, or full card details via email or message
  • Check email sender addresses carefully — scammers often use similar-looking domains
  • Hover over links before clicking to verify the actual destination URL
  • Be suspicious of urgent messages claiming your account will be closed
  • Report phishing attempts to hello@chatrefill.com immediately

Do

  • Verify sender email domains
  • Contact us directly if unsure

Don't

  • Click suspicious links
  • Download unexpected attachments

Beware of social engineering

High priority
  • Scammers may impersonate ChatRefill support staff or other trusted entities
  • Never share account details, OTPs, or verification codes with anyone claiming to be support
  • Official ChatRefill support will never call you unexpectedly asking for sensitive information
  • Be cautious of offers that seem too good to be true — they usually are
  • Verify any unusual requests through official ChatRefill channels

Do

  • Verify caller identity independently
  • Use official support channels only

Don't

  • Trust unsolicited calls
  • Share OTPs with anyone

Verify official communications

High priority
  • Official emails come from the @chatrefill.com domain only
  • We communicate important updates through your account dashboard first
  • Check for proper grammar and professional formatting in official communications
  • Legitimate emails will address you by your registered name
  • When in doubt, log in directly to chatrefill.com instead of clicking email links

Do

  • Type chatrefill.com directly in your browser
  • Check sender domain carefully

Don't

  • Click "verify account" links in emails
  • Trust emails with poor grammar

Monitor your transaction history

High priority
  • Regularly review your transaction history in your ChatRefill account
  • Set up transaction notifications via email or SMS for real-time alerts
  • Report any unauthorized or suspicious transactions within 24 hours
  • Keep receipts and confirmation emails for your records
  • If something looks wrong, contact support immediately — don't wait

Do

  • Check history weekly
  • Enable transaction notifications

Don't

  • Ignore unfamiliar transactions
  • Delete confirmation emails

Protect your payment information

Critical
  • Only enter payment details on the official ChatRefill website (look for HTTPS)
  • Never share your full card number, CVV, or PIN with anyone
  • Prefer virtual or one-time cards from your bank when available for added protection
  • Monitor your bank statements for unauthorized ChatRefill charges
  • Remove saved payment methods if you suspect account compromise

Do

  • Use virtual or one-time cards
  • Verify HTTPS in your browser

Don't

  • Share CVV codes
  • Save cards on public devices

Secure your mobile device

High priority
  • Set up a strong screen lock (PIN, pattern, fingerprint, or Face ID)
  • Enable device encryption in your phone settings
  • Install apps only from official stores (App Store, Google Play)
  • Keep your device's operating system updated to the latest version
  • Enable "Find My Device" to locate or wipe your phone if lost or stolen

Do

  • Use biometric locks
  • Enable automatic updates

Don't

  • Use simple PINs like 1234
  • Install apps from unknown sources

Keep software updated

Recommended
  • Enable automatic updates for your operating system and apps
  • Update your browser regularly to get the latest security patches
  • Remove apps you no longer use to reduce attack surface
  • Install reputable antivirus or security software on your devices
  • Update your router firmware periodically for network security

Do

  • Enable auto-updates
  • Use the latest browser versions

Don't

  • Ignore update prompts
  • Use outdated software

Use secure networks

High priority
  • Avoid conducting financial transactions on public Wi‑Fi networks
  • Use a VPN when connecting to untrusted networks
  • Ensure your home Wi‑Fi uses WPA3 or WPA2 encryption
  • Never access your ChatRefill account on shared or public computers
  • Log out of your account when using any shared devices

Do

  • Use mobile data for transactions
  • Use trusted VPN services

Don't

  • Use public Wi‑Fi for payments
  • Stay logged in on shared devices

Watch for shoulder surfing

Recommended
  • Be aware of people around you when entering passwords or PINs
  • Use privacy screen protectors on your devices in public
  • Shield your screen when entering sensitive information
  • Avoid accessing financial accounts in crowded public spaces

Do

  • Use privacy screens
  • Position yourself away from crowds

Don't

  • Enter PINs in plain view
  • Leave your screen visible

Stay informed about threats

Recommended
  • Follow ChatRefill on social media for security announcements
  • Subscribe to our newsletter for the latest security tips
  • Learn about common scam tactics targeting financial services
  • Share security knowledge with family and friends
  • Check our blog regularly for updated security advisories

Do

  • Follow official ChatRefill channels
  • Read security updates

Don't

  • Ignore security news
  • Assume you can't be targeted

Report suspicious activity immediately

Critical
  • Report any unauthorized access or suspicious activity immediately
  • Contact us if you receive suspicious communications claiming to be from ChatRefill
  • Quick reporting helps us protect you and other users
  • Change your password immediately if you suspect compromise
  • Document suspicious incidents with screenshots if possible

Do

  • Report within 24 hours
  • Take screenshots of scams

Don't

  • Wait to report issues
  • Delete evidence

Verify website authenticity

High priority
  • Always type chatrefill.com directly in your browser address bar
  • Check for the padlock icon (HTTPS) before entering any information
  • Bookmark the official ChatRefill website to avoid typosquatting
  • Be wary of ads or links that redirect to ChatRefill lookalike sites
  • The official domain is chatrefill.com — no variations

Do

  • Bookmark the official site
  • Check for the HTTPS padlock

Don't

  • Click random links
  • Trust lookalike domains

Contact official support only

High priority
  • Official support email: hello@chatrefill.com
  • Access support through your account dashboard or official website
  • We respond to legitimate inquiries within 24–48 hours
  • Never trust “support” contacts from social media DMs or unknown numbers

Do

  • Use official email addresses
  • Contact through the website

Don't

  • Trust random “support” accounts
  • Share details in DMs

Quick security checklist

Strong, unique password enabled
Two-factor authentication active
Transaction notifications on
Device has screen lock
Software is up to date
Using a secure network
Know how to spot phishing
Official website bookmarked
Support contacts saved

Important reminder

ChatRefill staff will NEVER:

  • Ask for your password or PIN
  • Request remote access to your device
  • Ask for verification codes via call or text
  • Request payment via gift cards
  • Threaten account closure for non-compliance
  • Send unsolicited WhatsApp or Telegram messages
Need help?

Spotted something suspicious?

If you suspect fraudulent activity or have received a suspicious communication, report it immediately. Your quick action helps protect everyone.

hello@chatrefill.com · We respond within 24 hours

"Security is a shared responsibility. By following these guidelines, you contribute to a safer environment for everyone using ChatRefill."

— ChatRefill Security Team