Be alert to messages, websites or documents that impersonate a supplier. Verify who you are dealing with before sharing sensitive information or arranging a payment.
Check the contact and website
Check the spelling of the website domain and sender address. An account name, logo, screenshot or membership badge alone is not proof of identity. Confirm unusual requests through a contact channel you have independently verified, not only the links or numbers included in the message.
Confirm payment instructions separately
Review the contracting company, invoice reference, payment beneficiary and agreed amount. If payment details change or a message pressures you to act urgently, pause and confirm the change through a previously verified channel before proceeding. A quotation or cart submission does not by itself reserve stock or confirm an order.
Protect sensitive information
Do not disclose account passwords, one-time verification codes or recovery codes in an inquiry or chat. Avoid opening unexpected attachments or installing software at the request of an unverified sender.
Report a suspicious message
Keep the original message, sender details, relevant URLs and any payment reference. Use the contact page to raise a concern, and independently verify the channel if you suspect the website itself is being impersonated. If you have already sent money, contact your payment provider promptly. Do not include passwords or verification codes in your report.