Skip to content
TrustDB
Log In

Protect yourself

Safety guide · Updated 28 Oct 2026

Protect your account: 2FA, DMs, links and minors

Most account losses start with a reused password, a link clicked in a hurry, or a stranger in your DMs. A few settings and habits close most of those doors.

Do the first two items below today. They matter more than the rest.

Do and don't

The short version. Skim this first.

Do

  • Turn on 2FA on your email first, then on Discord, Telegram, Instagram, your game accounts and any exchange. Prefer an authenticator app or security key to SMS where you can, and keep backup codes offline.
  • Use a long, unique password for each account, and a password manager to keep track.
  • Limit who can message you. Use the platform's message request and spam filters, and keep friend requests for people you know.
  • Review connected apps, bots and devices from time to time, and remove what you don't recognise.
  • Type addresses yourself and never run files from strangers. See spot phishing and fake login links.
  • Keep your devices, browser and apps up to date, and use security software on the computer you trade from.
  • Use a separate email for trading and gaming accounts than the one you use for your bank.
  • Share the minimum in public servers and profiles: keep your real name, address, school and phone number out.
  • Check before you trade. Look the other person up first.

Don't

  • Don't reuse passwords, or share them with friends or trade partners.
  • Don't share 2FA codes, backup codes, tokens or seed phrases with anyone.
  • Don't accept links, files or friend requests from strangers who promise free currency, items or subscriptions.
  • Don't log in on shared or public computers, or install browser extensions from unknown sources.
  • Don't share your screen or give remote access to someone who offers to "help".
  • Don't keep the only copy of your recovery details inside the account itself.

If it already happened (your account may be compromised)

  1. Secure your email first, from a device you trust.
  2. Change the password on the affected account and on any account that shared it, and sign out of all other sessions.
  3. Remove devices, apps and bots you don't recognise, and update your recovery details.
  4. Turn on 2FA and save the new backup codes offline.
  5. Follow the account takeover guide for recovery and what to check afterwards.
  6. Report it as phishing or account theft if it came through a link or a file.

For younger players and parents

  • Talk about trading scams before they happen. Nobody real asks for a password, a code or a gift in return for "free" items.
  • Use the platform's parental controls and privacy settings together, and decide who can message the account.
  • Agree a simple rule: tell a parent before any trade that involves real money, a card, a gift card or an account.
  • Keep payment methods out of reach. Don't save cards on game accounts a child uses.
  • If something goes wrong, stay calm and follow the steps for being scammed. A child who is not afraid of getting in trouble reports sooner.
  • Parents and guardians of someone under 18 can file a grievance with TrustDB if their child is affected by TrustDB content or by how we handle personal data.

Where to go next

The right page on TrustDB for the next step.

Questions

  • It is much better than nothing. An authenticator app or a security key is stronger where the service offers one. Keep your backup codes somewhere offline.
  • Sit down with the child and turn on 2FA and privacy settings together, then agree the rule about telling you before any trade involving money or an account.
  • No. You can use the lookup without an account.

More answers in the FAQ.

General safety information, not legal or financial advice. TrustDB isn't a party to your deals. We don't hold funds, act as a middleman or get refunds for you.

Read next

All guides

Check before you send anything.

A lookup takes a second and no account. It's the cheapest insurance in trading.

Check someoneReport a scam