Anti-Fraud & Security Notice

Official communications

Official public domains:

Official enquiry addresses include:

Afilcorp will not ask through unsolicited communication for:

• passwords;
• one-time codes;
• private keys;
• remote access;
• payment to a newly changed account without independent verification;
• transfer to a personal or unexplained account;
• sensitive documents through a public form.

Verification

Before acting on an instruction:

1. inspect the exact domain; 2. do not rely on a display name; 3. independently contact Afilcorp through the official Website; 4. verify payment changes through a known channel; 5. do not click a suspicious link; 6. preserve the communication.

Impersonation

Fraudsters may copy:

• logos;
• names;
• reports;
• employee identities;
• domain appearance;
• email signatures.

Possession of Afilcorp branding is not proof of authority.

Known malicious domains

List malicious domains in defanged form only, with date identified and status.

Do not create a clickable malicious link.

Reporting

Report suspected impersonation through the Contact page or [email protected].

Where appropriate, contact your bank, technology provider, law enforcement or relevant public authority.

Evidence

Preserve:

• full email headers;
• URLs;
• screenshots;
• payment details;
• timestamps;
• telephone numbers;
• message history.

Do not edit the original evidence.

Limitation

Afilcorp cannot control third-party websites, domains or communications. This Notice does not guarantee prevention of fraud. Users must exercise independent verification.