Good habits

• Use a password unique to this account — never one you reuse elsewhere.
• Enable two-factor authentication if it is offered.
• Never share your password or one-time codes. Staff will never ask for them.
• Sign out on shared or public computers.
• Keep the email address on your profile current — it is how account recovery works.

Spotting a scam

Be suspicious of any message creating urgency about your loan, asking for a payment to an unfamiliar account, or linking to a login page. When in doubt, do not click — open the site directly and check your dashboard. Anything genuine will be waiting there.