Stay Vigilant: Guarding Against Social Engineering Attacks

Cybercriminals are shifting tactics. Increasingly, they use social engineering-manipulating human trust rather than breaking through technical defenses-to gain unauthorized access. These schemes often involve impersonating trusted individuals or companies to trick victims into handing over sensitive information or approving fraudulent transactions.

Why It Matters in Crypto

Social engineering is especially dangerous in crypto, where transactions are irreversible and funds can vanish in seconds. Attackers may pose as BitGo employees, send fake support emails, or create convincing login pages to steal your credentials. Some now even use AI voice deepfakes to impersonate executives.

BitGo's Security Approach

At BitGo, security is our foundation. We've never lost client funds in custody and employ layered protections, including:

• Mandatory 2FA and identity verification

• Internal phishing training and awareness drills

• Collaboration with law enforcement and white hat hackers

• Ongoing education for our clients

How to Protect Yourself

• Verify senders carefully-watch for spoofed domains (e.g., B1tGo.com)

• Never share passwords, 2FA codes, or private keys

• Be skeptical of urgent requests or suspicious calls

• Use security features like 2FA, device monitoring, and whitelists

• BitGo will never call you unprompted. If unsure, email: support@bitgo.com

Report Suspicious Activity

If you suspect a scam, don't engage. Report it to support@bitgo.com. Your vigilance helps protect the entire BitGo community.

Security Is a Shared Responsibility

BitGo remains committed to your protection-but your awareness is essential. Together, we can stay one step ahead.