Fraud Prevention and Security

Version 2.0 · Effective 24 October 2026

How Vision Makers Technologies Inc. counters fraud, and how you protect yourself.

The one rule that matters most Nobody from Vision Makers will ever ask for your seed phrase, private key or recovery words. Anyone who does, in any channel, however convincing, is attempting to steal from you. There is no exception, no support process and no emergency that requires them.

1 · How we protect the platform

Control Operation
Smart contract audits All platform contracts independently audited by CertiK and Hacken
Non-custodial architecture We hold no keys; there is no central pot to steal
Encryption In transit and at rest
Access control Role-based, least-privilege, with logging
Monitoring Anomaly detection on platform and account activity
Vendor due diligence Security review before engagement, periodic re-review
Wallet screening Blockchain analytics for illicit-source exposure
Activity logging Every swap, agent run and alert rule logged to your account

2 · Threats you will encounter

Phishing sites. Fake front-ends that look identical and request a malicious signature. Always check the domain. Bookmark the real one.

Fake support. Impersonators in Telegram, Discord or X offering help and requesting your seed phrase, a "wallet validation", or a screen share. We never initiate support contact via direct message. See Communications Policy.

Malicious approvals. A transaction that looks like a swap but grants unlimited spending over your tokens. Read what you are signing; prefer scoped approvals; revoke old ones periodically.

Address poisoning. An attacker sends dust from an address resembling one in your history, hoping you copy it. Verify the full address, never just the first and last characters.

Fake tokens and launches. Impersonating a legitimate project. Verify contract addresses from official sources.

Giveaway and airdrop scams. "Send 1 ETH, receive 2." Always a theft. Vision Makers never asks you to send funds to receive a distribution.

SIM swap and 2FA interception. Prefer an authenticator app over SMS.

Social engineering into automation. Being persuaded to set an agent rule or copy a wallet that benefits an attacker. Configure your own rules.

3 · Protecting yourself

  1. Use a hardware wallet for meaningful balances.
  2. Store your seed phrase offline, never photographed, typed into a website, or in cloud storage.
  3. Read every signature request. If you do not understand it, reject it.
  4. Scope approvals and revoke stale ones.
  5. Use a separate wallet for experimental activity.
  6. Enable authenticator-app 2FA, not SMS.
  7. Verify the domain every time; bookmark it.
  8. Treat unsolicited contact as hostile by default.
  9. Set conservative limits on automated actions.
  10. Be sceptical of urgency: it is the universal pressure tactic.

4 · If you are compromised

  1. Move remaining assets to a new wallet with a freshly generated seed phrase.
  2. Revoke approvals on the compromised address.
  3. Do not sign anything further from it.
  4. Report to admin@visionmakers.io with the address, transaction hashes and timeline.
  5. Report to law enforcement in your jurisdiction.

We cannot reverse transactions or recover stolen assets. We can assist with information, flag addresses, and cooperate with investigators.

5 · Reporting

What Where
Suspected fraud or impersonation admin@visionmakers.io
Security vulnerability Responsible Disclosure
Suspected data breach Data Breach Notification
Platform abuse Acceptable Use Policy