Security advisory center
Security Advisories
Stay secure with expert tips on potential risks and learn how to protect your data.
Security first
Expert security advice
Your security is our top priority. Follow these expert guidelines to ensure a safe and secure experience with ChatRefill.
Create Strong, Unique Passwords
- Use at least 12 characters with uppercase, lowercase, numbers, and special characters
- Never reuse passwords across different accounts or services
- Consider using a reputable password manager like 1Password, Bitwarden, or LastPass
- Change your password immediately if you suspect any compromise
- Avoid using personal information like birthdays, names, or common words
DO
- Use passphrases like "Coffee$Rain2024!"
- Enable password autofill from secure managers
DON'T
- Use "password123" or similar
- Write passwords on sticky notes
Enable Two-Factor Authentication (2FA)
- Enable 2FA on your ChatRefill account for an extra security layer
- Use authenticator apps (Google Authenticator, Authy) instead of SMS when possible
- Save backup codes in a secure location in case you lose device access
- 2FA protects your account even if your password is compromised
DO
- Use authenticator apps
- Keep backup codes safe
DON'T
- Share verification codes
- Disable 2FA for convenience
Recognize Phishing Attempts
- ChatRefill will NEVER ask for your password, PIN, or full card details via email or message
- Check email sender addresses carefully - scammers often use similar-looking domains
- Hover over links before clicking to verify the actual destination URL
- Be suspicious of urgent messages claiming your account will be closed
- Report phishing attempts to hello@chatrefill.com immediately
DO
- Verify sender email domains
- Contact us directly if unsure
DON'T
- Click suspicious links
- Download unexpected attachments
Beware of Social Engineering
- Scammers may impersonate ChatRefill support staff or other trusted entities
- Never share account details, OTPs, or verification codes with anyone claiming to be support
- Official ChatRefill support will never call you unexpectedly asking for sensitive information
- Be cautious of offers that seem too good to be true - they usually are
- Verify any unusual requests through official ChatRefill channels
DO
- Verify caller identity independently
- Use official support channels only
DON'T
- Trust unsolicited calls
- Share OTPs with anyone
Verify Official Communications
- Official emails come from @chatrefill.com domain only
- We communicate important updates through your account dashboard first
- Check for proper grammar and professional formatting in official communications
- Legitimate emails will address you by your registered name
- When in doubt, log in directly to chatrefill.com instead of clicking email links
DO
- Type chatrefill.com directly in browser
- Check sender domain carefully
DON'T
- Click "verify account" links in emails
- Trust emails with poor grammar
Monitor Your Transaction History
- Regularly review your transaction history in your ChatRefill account
- Set up transaction notifications via email or SMS for real-time alerts
- Report any unauthorized or suspicious transactions within 24 hours
- Keep receipts and confirmation emails for your records
- If something looks wrong, contact support immediately - don't wait
DO
- Check history weekly
- Enable transaction notifications
DON'T
- Ignore unfamiliar transactions
- Delete confirmation emails
Protect Your Payment Information
- Only enter payment details on the official ChatRefill website (look for HTTPS)
- Never share your full card number, CVV, or PIN with anyone
- Prefer virtual or one-time cards from your bank when available for added protection
- Monitor your bank statements for unauthorized ChatRefill charges
- Remove saved payment methods if you suspect account compromise
DO
- Use virtual/one-time cards
- Verify HTTPS in browser
DON'T
- Share CVV codes
- Save cards on public devices
Secure Your Mobile Device
- Set up a strong screen lock (PIN, pattern, fingerprint, or Face ID)
- Enable device encryption in your phone settings
- Install apps only from official stores (App Store, Google Play)
- Keep your device's operating system updated to the latest version
- Enable "Find My Device" to locate or wipe your phone if lost or stolen
DO
- Use biometric locks
- Enable automatic updates
DON'T
- Use simple PINs like 1234
- Install apps from unknown sources
Keep Software Updated
- Enable automatic updates for your operating system and apps
- Update your browser regularly to get the latest security patches
- Remove apps you no longer use to reduce attack surface
- Install reputable antivirus/security software on your devices
- Update your router firmware periodically for network security
DO
- Enable auto-updates
- Use latest browser versions
DON'T
- Ignore update prompts
- Use outdated software
Use Secure Networks
- Avoid conducting financial transactions on public WiFi networks
- Use a VPN when connecting to untrusted networks
- Ensure your home WiFi uses WPA3 or WPA2 encryption
- Never access your ChatRefill account on shared or public computers
- Log out of your account when using any shared devices
DO
- Use mobile data for transactions
- Use trusted VPN services
DON'T
- Use public WiFi for payments
- Stay logged in on shared devices
Watch for Shoulder Surfing
- Be aware of people around you when entering passwords or PINs
- Use privacy screen protectors on your devices in public
- Shield your screen when entering sensitive information
- Avoid accessing financial accounts in crowded public spaces
DO
- Use privacy screens
- Position yourself away from crowds
DON'T
- Enter PINs in plain view
- Leave your screen visible
Stay Informed About Threats
- Follow ChatRefill on social media for security announcements
- Subscribe to our newsletter for the latest security tips
- Learn about common scam tactics targeting financial services
- Share security knowledge with family and friends
- Check our blog regularly for updated security advisories
DO
- Follow official ChatRefill channels
- Read security blogs
DON'T
- Ignore security news
- Assume you can't be targeted
Report Suspicious Activity Immediately
- Report any unauthorized access or suspicious activity immediately
- Contact us if you receive suspicious communications claiming to be from ChatRefill
- Quick reporting helps us protect you and other users
- Change your password immediately if you suspect compromise
- Document suspicious incidents with screenshots if possible
DO
- Report within 24 hours
- Take screenshots of scams
DON'T
- Wait to report issues
- Delete evidence
Verify Website Authenticity
- Always type chatrefill.com directly in your browser address bar
- Check for the padlock icon (HTTPS) before entering any information
- Bookmark the official ChatRefill website to avoid typosquatting
- Be wary of ads or links that redirect to ChatRefill lookalike sites
- The official domain is chatrefill.com - no variations
DO
- Bookmark official site
- Check for HTTPS padlock
DON'T
- Click random links
- Trust lookalike domains
Contact Official Support Only
- Official support email: hello@chatrefill.com
- Access support through your account dashboard or official website
- We respond to legitimate inquiries within 24-48 hours
- Never trust "support" contacts from social media DMs or unknown numbers
DO
- Use official email addresses
- Contact through website
DON'T
- Trust random "support" accounts
- Share details with DMs
Quick Security Checklist
Strong, unique password enabled
Two-factor authentication active
Transaction notifications on
Device has screen lock
Software is up to date
Using secure network
Know how to spot phishing
Official website bookmarked
Support contacts saved
Important Reminder
ChatRefill staff will NEVER:
- Ask for your password or PIN
- Request remote access to your device
- Ask for verification codes via call/text
- Request payment via gift cards
- Threaten account closure for non-compliance
- Send unsolicited WhatsApp or Telegram messages
"Security is a shared responsibility. By following these guidelines, you contribute to a safer environment for everyone using ChatRefill."
— ChatRefill Security Team
Payments
Secure payments
Checkout is powered by Stripe. Pay with major credit or debit cards, or USDC and USDT. Card details are never stored on our servers.
StripeUSDCUSDT
Apple Pay and Google Pay where available. USDC and USDT at checkout.