Security and Fraud Protection

Last updated, November 15, 2026

How we protect your account

• Passwords are stored only as strong one way hashes using PBKDF2, never in plain text, and never visible to staff.
• Sessions use secure, http only cookies, and signing out or a password change ends other sessions.
• Uploaded identity documents are kept in private storage, never on public links.
• The admin panel lives on its own separate address with its own login, is hidden from search engines, and is never linked from the public app. Admin roles limit what each staff member can do, and every admin action is written to an audit log.
• Raw identity document numbers are never stored, only verification references.

How you can protect yourself

• Use a strong password you do not use anywhere else, and never share it. Recon will never ask for your password by phone, email or message.
• Check the address before you sign in, reconfinancedigital.online.
• Tell us through in app support straight away if anything on your account looks wrong.

Reporting fraud

If you believe your account has been used fraudulently, contact support inside the app immediately or email [email protected]. We can suspend the account while we investigate.