Setting up two-factor authentication wherever it’s available is a helpful security step you can proactively take. It may prevent a bad actor from accessing your account even if they have your password, so it’s worth taking the time to set it up.

No. Not with support teams, not with “investment advisors,” not with anyone. A legitimate company or professional service provider would never ask for your seed phrase.

When someone has your seed phrase, they can import your wallet into their own device and drain every token, coin, and NFT in that wallet across every chain in seconds; no additional passwords or permissions needed. These transactions are irreversible. An exposed wallet should be considered compromised forever.

You can reduce your risk by typing website addresses directly into your browser instead of clicking links in unexpected emails or messages. Even small spelling changes in a URL can signal a fake site, so always look before you click.

Urgency is a big one. So are promises of guaranteed or risk-free returns. If the message pressures you to act immediately, pause and make sure taking the next action is in your best interest.

A simple one: don’t send crypto to someone you haven’t met in person or independently verified. Once it’s gone, it’s rarely recoverable. Risk isn’t limited to digital assets; scams happen everywhere. Double-check links, and if something sounds too good to be true, it likely is. Report scams to the Canadian Anti-Fraud Centre or your provincial regulator, and if you believe your Newton account has been compromised, please contact us immediately.

You can reach us by emailing [email protected] or by opening a ticket in the Newton app. We'll never contact you first, asking for account access or personal information.