تخطَّ إلى المحتوى

How can I recognise phishing and official Quppy communications?

Treat unexpected messages asking for credentials, codes, payments or urgent account action as suspicious. Verify the message through a separate official Quppy channel before responding.

آخر مراجعة: 2026-08-21

Official email domains

Current Quppy fraud guidance identifies official email addresses ending in:

  • @quppy.com
  • @quppypay.com

The final Trust Center must also publish an approved list of:

  • official website domains;
  • official app-store links;
  • official Telegram support bot;
  • official social-media accounts;
  • official support form.

Quppy Support should not ask you to

  • disclose your password;
  • disclose your full PIN;
  • share a live 2FA or one-time code;
  • install remote-access software;
  • move money to a “safe” wallet;
  • send crypto to verify your account;
  • pay an unexpected unlocking or recovery fee through an unofficial channel.

Common warning signs

Be cautious when a message:

  • creates extreme urgency;
  • threatens immediate account closure unless you act;
  • uses a lookalike domain;
  • asks you to bypass the Quppy app;
  • promises guaranteed investment returns;
  • asks for a crypto transfer to support staff;
  • sends an unexpected file or QR code;
  • contains a link that does not match the visible destination.

How to verify a message

  1. Do not use the link in the suspicious message.
  2. Open Quppy through the official app or type quppy.com directly.
  3. Contact official support using the channel listed there.
  4. Provide the sender address, screenshot and message time.
  5. Do not forward active authentication codes.

Report phishing

Account security and recovery

What should I do if my Quppy account may be compromised?

If you believe your Quppy account may be compromised, contact Quppy Support immediately through an approved channel. Do not approve unexpected login, new-device or transaction requests. Secure the email account and phone number linked to Quppy, preserve evidence of suspicious activity and follow the identity and security checks requested by Support.

Account security and recovery

How does Quppy protect my account?

Quppy uses multiple account and transaction controls, including PIN protection, biometric login on supported devices, two-factor authentication, transaction confirmation and new-device confirmation. Account recovery is handled through Quppy Support and identity and security checks. These controls reduce risk but cannot make an account, device or transaction completely risk-free.

Verification and compliance

Why can a Quppy transaction be delayed or rejected?

A Quppy transaction can be delayed, placed under review, returned or rejected because of payment-route rules, blockchain confirmations, incorrect details, security controls, transaction limits, provider availability, sanctions or AML/CFT checks, Travel Rule information, source-of-funds questions, or a technical incident. A pending or rejected status does not identify one specific cause, and Quppy may be legally unable to disclose every internal risk indicator.