> For the complete documentation index, see [llms.txt](https://docs.visionmakers.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.visionmakers.io/legal/fraud-and-security.md).

# Fraud Prevention and Security

Version 2.0 · Effective 24 October 2026

How **Vision Makers Technologies Inc.** counters fraud, and how you protect yourself.

<div class="callout">
<span class="callout-label">The one rule that matters most</span>
<strong>Nobody from Vision Makers will ever ask for your seed phrase, private key or recovery
words.</strong> Anyone who does, in any channel, however convincing, is attempting to steal
from you. There is no exception, no support process and no emergency that requires them.
</div>

## 1 · How we protect the platform

| Control | Operation |
| --- | --- |
| Smart contract audits | All platform contracts independently audited by **CertiK** and **Hacken** |
| Non-custodial architecture | We hold no keys; there is no central pot to steal |
| Encryption | In transit and at rest |
| Access control | Role-based, least-privilege, with logging |
| Monitoring | Anomaly detection on platform and account activity |
| Vendor due diligence | Security review before engagement, periodic re-review |
| Wallet screening | Blockchain analytics for illicit-source exposure |
| Activity logging | Every swap, agent run and alert rule logged to your account |

## 2 · Threats you will encounter

**Phishing sites.** Fake front-ends that look identical and request a malicious signature. Always
check the domain. Bookmark the real one.

**Fake support.** Impersonators in Telegram, Discord or X offering help and requesting your seed
phrase, a "wallet validation", or a screen share. We never initiate support contact via direct
message. See [Communications Policy](/legal/communications).

**Malicious approvals.** A transaction that looks like a swap but grants unlimited spending over
your tokens. Read what you are signing; prefer scoped approvals; revoke old ones periodically.

**Address poisoning.** An attacker sends dust from an address resembling one in your history,
hoping you copy it. Verify the full address, never just the first and last characters.

**Fake tokens and launches.** Impersonating a legitimate project. Verify contract addresses from
official sources.

**Giveaway and airdrop scams.** "Send 1 ETH, receive 2." Always a theft. Vision Makers never asks
you to send funds to receive a distribution.

**SIM swap and 2FA interception.** Prefer an authenticator app over SMS.

**Social engineering into automation.** Being persuaded to set an agent rule or copy a wallet that
benefits an attacker. Configure your own rules.

## 3 · Protecting yourself

1. Use a **hardware wallet** for meaningful balances.
2. Store your seed phrase **offline**, never photographed, typed into a website, or in cloud storage.
3. **Read every signature request.** If you do not understand it, reject it.
4. **Scope approvals** and revoke stale ones.
5. Use a **separate wallet** for experimental activity.
6. Enable **authenticator-app 2FA**, not SMS.
7. **Verify the domain** every time; bookmark it.
8. Treat **unsolicited contact** as hostile by default.
9. Set **conservative limits** on automated actions.
10. Be sceptical of **urgency**: it is the universal pressure tactic.

## 4 · If you are compromised

1. **Move remaining assets** to a new wallet with a freshly generated seed phrase.
2. **Revoke approvals** on the compromised address.
3. **Do not** sign anything further from it.
4. **Report** to [admin@visionmakers.io](mailto:admin@visionmakers.io) with the address, transaction hashes and timeline.
5. **Report to law enforcement** in your jurisdiction.

**We cannot reverse transactions or recover stolen assets.** We can assist with information,
flag addresses, and cooperate with investigators.

## 5 · Reporting

| What | Where |
| --- | --- |
| Suspected fraud or impersonation | [admin@visionmakers.io](mailto:admin@visionmakers.io) |
| Security vulnerability | [Responsible Disclosure](/legal/responsible-disclosure) |
| Suspected data breach | [Data Breach Notification](/legal/data-breach) |
| Platform abuse | [Acceptable Use Policy](/legal/acceptable-use) |