Phishing emails are designed to trick users into giving away sensitive information such as passwords, OTPs, or making contact through fake channels. These emails may look like they’re from Coinhako, but they’re actually from scammers. Below are key red flags to help you identify phishing attempts and protect your account.
Common Phishing Red Flags
1. Fake Email Addresses
Check if the sender’s email matches our official Coinhako addresses:
Official Coinhako email domains:
- hello@coinhako.com
- hello@updates.coinhako.com
- announcements@coinhako.com
- notifications@coinhako.com
If the sender address doesn’t match the list above — do not trust it.
Examples of suspicious sender emails:
- mail.service.lk@tourmysystem.com
- pipe306333899+MesPTYRH@mail.pipefy.com
Legitimate companies — including Coinhako — will never ask for passwords, OTPs, or security codes via email, phone, or SMS.
Phishing emails may ask you to:
- Reply with your login credentials
- Share OTPs or 2FA codes
- Click links to input your password or seed phrase
3. Phone Numbers in Emails — Major Red Flag
- Coinhako does not provide customer support via phone.
- Legitimate Coinhako emails will never contain phone numbers for support.
- Any email that asks you to call a number — no matter how urgent it seems — is a phishing attempt.
Examples from phishing emails:
- +65 3159 0283
- +65 3159 2186
- +65 3159 2233
4. Suspicious Links
Scammers often hide malicious URLs behind text or buttons. Before clicking a link:
- Hover your mouse pointer over it (without clicking)
- Look at the bottom-left corner of your browser to see the actual URL
- Check if it leads to coinhako.com — if not, don’t click
5. Suspicious Login Location Alerts
Phishing emails often use fake login alerts to create panic.
Check if the details match your actual activity:
- Do you recognize the login location?
- Is the IP address familiar?
- Does the time zone match your current region?
If the login location shows something unusual (e.g. Havana, Cuba or Mumbai) and you didn’t log in — don't click anything in the email. Go directly to the Coinhako app or website to check.
6. Mismatched Branding
Look for subtle design flaws:
- Inconsistent logos or fonts
- Poor formatting
- Unusual language or grammar
If the email doesn't look exactly like official Coinhako emails you've seen before, don’t trust it.
7. Unexpected Attachments
Coinhako will never send files for you to open in email.
If an email includes a PDF, ZIP, DOC, or any file — treat it as suspicious.
What an Official Coinhako Email Looks Like
A legitimate Coinhako security email will:
- Come from a verified Coinhako address
- Include accurate location/device/IP info
- Never ask you to call support
- Direct you to secure actions through official platforms only
Stay Safe: When in Doubt
- Never share OTPs or passwords with anyone
- Do not click on links or attachments you’re unsure about
- When in doubt, verify the information by going directly to www.coinhako.com or reaching out via our official Help Desk
- Bookmark this page for future reference and help spread awareness to keep our community safe from scams.