Security is fundamental to everything we do at Stoic AI (learn more about our security standards at đ stoic.ai).
Phishing is a deceptive technique where scammers impersonate legitimate companies (such as Stoic AI, exchanges, or support team members) to trick you into revealing sensitive account credentials.
đĄď¸ Core Security Rules
We Will Never Ask for Your Secret Keys or Passwords: Stoic AI team members will never ask for your API Secret Keys, account passwords, 2FA codes, or one-time login links. Support may only ask for the Email address linked to your account for identification.
Never Enable Withdrawal Permissions: Stoic AI only requires trade-execution and reading permissions for your API keys. Never enable the Withdrawals permission when generating keys on your exchange.
Verify Official Communication Channels: Official messages will only come directly through the Stoic AI app or via official
@stoic.aiemail addresses.
â ď¸ What to Do If You Suspect a Phishing Attempt: If you receive a suspicious message or email claiming to be from Stoic AI asking for credentials or wallet transfers, do not respond. Immediately notify our support team via in-app chat or email us at [email protected].
â Frequently Asked Questions (FAQ)
Q: What should I do if I accidentally shared my API Secret Key with someone? A: Immediately log in to your exchange account and delete the compromised API key. Then, generate a fresh API key and reconnect it inside your Stoic AI app.
Q: Can anyone withdraw my funds using the API keys connected to Stoic AI? A: No. Stoic AI strictly operates via trade-only API keys. Without withdrawal permissions enabled, funds cannot be moved off your exchange account.