Security Center

Security is a shared responsibility

Legacy NFTY uses layered controls to protect accounts and platform activity, but no online system can remove every risk. The strongest protection comes from combining platform safeguards with careful member behaviour.

Use this Security Center as a practical checklist. If you believe your account or email has been compromised, act immediately rather than waiting for a transaction or profile change to appear.

Legacy NFTY support will never ask for your password, current authenticator code, authentication recovery credential, private key or wallet seed phrase.

Platform security controls

Verified account access

Email verification helps confirm control of the address connected to an account. Login controls, secure password handling, rate limits and session protections are used to reduce unauthorised access and automated abuse.

Two-factor authentication

Authenticator-based two-factor authentication adds a time-sensitive verification step beyond the password. Members should enable it promptly and store authenticator credentials in a secure offline location.

Device and session visibility

Where available, members can review active sessions, device information and recent account access. Unknown sessions should be revoked and investigated immediately.

Protected account actions

Sensitive actions use permission checks, anti-forgery protection and account validation. Some requests may require additional authentication, administrative review or confirmation.

Recorded financial activity

Wallet changes and transaction requests are recorded through structured account records. Members should compare transaction references, network information and status history before taking further action.

Your essential security checklist

1. Use a unique, long password that is not used on any other website.
2. Enable authenticator-based two-factor authentication.
3. Protect your registered email account with its own strong password and two-factor authentication.
4. Verify that the browser address shows legacynfty.com before signing in.
5. Never disclose OTPs, authenticator credentials, passwords, private keys or seed phrases.
6. Review active sessions, notifications and wallet activity regularly.
7. Confirm the asset, blockchain network and destination before every transfer.
8. Contact official support immediately when something appears unfamiliar.

Password security

A strong password should be long, unique and difficult to associate with you. Avoid names, birthdays, phone numbers, keyboard patterns, reused passwords and common phrases. A password manager can help generate and store unique credentials.

If another website where you used the same password has been breached, change your Legacy NFTY password immediately—even if you have not noticed suspicious activity.

Protect two-factor and recovery codes

Authenticator codes are designed to be temporary and private. Authenticator credentials can bypass the usual authenticator flow and must be treated like high-value credentials. Store them offline, do not photograph them in an automatically synced gallery and never send them through chat or email.

Recognise phishing and impersonation

Attackers may copy logos, page layouts, email templates or staff names to create convincing messages. They may claim that an account will be closed, a withdrawal is blocked or a reward is expiring in order to create urgency.

Common warning signs

• A domain that looks similar to legacynfty.com but contains extra words, characters or a different ending.
• A request to install remote-access software or share your screen.
• A request to transfer funds to “verify” or “unlock” an account outside the published platform workflow.
• A demand for a password, OTP, authenticator credential, private key or seed phrase.
• Unexpected attachments, shortened links or urgent instructions that bypass the dashboard.

Transaction security

Blockchain transactions can be irreversible. Before submitting a transfer, confirm the supported asset, network, destination address, amount and any required memo or tag. A correct address on the wrong network may still result in permanent loss.

Do not copy transaction details from an unverified message. Use the information displayed in the authenticated dashboard or confirmed through official support. Malware can replace copied wallet addresses, so compare the beginning and end of the destination before sending.

Secure your devices

• Keep the operating system, browser and security software updated.
• Use a screen lock and device encryption where available.
• Avoid signing in from shared, public or untrusted devices.
• Do not install unofficial browser extensions or cracked software.
• Avoid public Wi-Fi for sensitive activity unless you understand and control the connection risk.
• Sign out after using a device you do not exclusively control.

If you suspect compromise

1. Stop entering credentials or approving requests.
2. Use a trusted device to change your Legacy NFTY and email passwords.
3. End unknown sessions and review two-factor settings.
4. Check wallet, deposit, withdrawal, referral and profile activity.
5. Save relevant timestamps, messages and screenshots without exposing secret credentials.
6. Contact Legacy NFTY through the official website and clearly mark the request as a security concern.

Official communication

Use only the support details published on legacynfty.com. Social media profiles, messaging accounts or individuals claiming to represent the platform should not be trusted unless they are confirmed through an official channel.

Security guidance may be updated as risks and platform controls evolve. Review this page periodically and pay attention to security notices in your dashboard.