Scammers can create websites that closely resemble the original. If you don’t pay close attention to the web address or small visual differences, you might end up "logging in" on a fake page - unknowingly giving your login and password to fraudsters.

OUR TIP #1: Always type “xtb.com/en” manually in your browser or use XTB’s official app downloaded from Google Play or App Store.

OUR TIP #2: If you logged in through a suspicious site, change your password immediately on xtb.com. If it’s too late, contact XTB Client Service to block your account.

Cybercriminals often send texts or emails claiming, for example, that a transaction was made on your account and must be confirmed via a link. That link leads to a fake site where, if you enter your login and password, scammers gain access to your real accounts. They may also use other excuses - like service issues or impersonating government institutions with fake alerts.

OUR TIP: SMS sender names can be faked. Be cautious with unexpected messages and never click on links - even if they look almost identical to official addresses.

Scammers often reach out from unknown numbers, pretending to be a friend who’s lost their phone and urgently needs help. A broken car, a blocked credit card, a sick child - whatever the story, pause and think before sending any money.

OUR TIP: Try contacting your real friend through another channel to confirm it’s really them. If the message feels pushy or suspicious, report the account and block the number.

If you use the same password for your email, social media, online stores, streaming platforms, subscriptions and financial services, you’re putting all your data and money at risk. A single hacked database can open the door to all your accounts. After breaching a website, cybercriminals often upload thousands - or even millions - of stolen credentials to the darknet, where others can buy and exploit them.

OUR TIP: Always use different passwords for different accounts and services. To make this easier and more secure, consider using a trusted password manager.

Many people use very simple passwords like “Password1!” or “12345678!”, or they include personal information such as their name or date of birth in it. Once a hacker gets hold of your personal data, it becomes much easier for them to guess your password.

OUR TIP: Create a complex password using a mix of uppercase and lowercase letters, numbers in a random sequence and special characters - sometimes replacing letters to make it easier to remember. Avoid using your name, surname, birthdate or any other personal data you provide during registration.

Please be aware that XTB will never contact you via WhatsApp, Facebook, Messenger, or any other social media platforms or groups.

We have recently been informed that scammers are impersonating XTB representatives and reaching out to individuals through these channels. These are fraudulent attempts.

Official XTB representatives will only contact you via phone and will never ask for your card numbers or sensitive financial information.

If you receive any suspicious messages, please report them to us immediately.