This Security Notice is provided for informational and awareness purposes only and is intended to help clients identify and avoid fraudulent websites, phishing attempts, and impersonation scams. This notice does not replace or amend any Client Agreement, legal disclosure, or official communication issued by Cregis.

Beware of Fraudulent Websites and Impersonation

Fraudsters may create fake websites, social media pages, email addresses, or communication channels that closely resemble those of Cregis Custody FZE. Always ensure that you are interacting with official Cregis channels only.

Official Cregis Custody FZE Domains

Only trust and access Cregis services through the following official websites:

• https://cregis.ae
• https://www.cregis.ae

Cregis does not operate or control any other domains for the provision of custody services.

If you are uncertain about the legitimacy of any website, link, or communication, please do not proceed and contact us immediately.

How to Verify Authentic Websites and Communications

To help protect yourself:

• Carefully check the spelling and structure of the URL for errors or unusual characters
• Confirm the website uses HTTPS and displays a valid security padlock in the browser
• Avoid clicking on sponsored advertisements or links in search engines; enter official URLs manually where possible
• Verify that official emails originate from authorised Cregis domains (e.g. cregiscustody.com / cregis.ae)

Protect Your Personal and Account Information

To safeguard your assets:

• Never click on suspicious, unsolicited, or unexpected links
• Never download software, browser extensions, or files from unknown or unverified sources
• Never share your login credentials, passwords, recovery phrases, private keys, wallet details, or verification codes

Cregis Custody FZE will NEVER:

• ask for your password, private keys, or seed phrases;
• request remote access to your computer or mobile device; or
• ask you to install third-party software to access your account.

Any such request claiming to originate from Cregis should be treated as fraudulent.

Reporting Suspicious Activity

If you encounter or suspect:

• a scam website;
• a phishing attempt;
• impersonation via email, messaging platforms, or social media; or
• any suspicious communication claiming to be from Cregis;

Please report it immediately to: [email protected]

Prompt reporting helps us protect you and other clients and supports our ongoing security monitoring.

Social Media and Public Communications

Cregis will communicate only through officially designated channels. Clients should exercise caution when engaging with any unofficial or unverified social media accounts claiming to represent Cregis.

(Insert social media links if applicable)