Security & Scam Safety

Last updated

Draft. These policies are working drafts and are being reviewed.

How to know it’s really Shadowstar

We never:

  • cold-call you, or contact you out of the blue asking you to act fast
  • ask for your passwords or 2-step verification codes
  • ask you to pay by gift card, wire transfer or cryptocurrency
  • connect to your device unless you started the screen-share session yourself

We always:

  • contact you from the same known email address and phone number
  • use your personal verification word when you ask us to prove it’s us
  • put quotes and changes in writing

If someone claims to be Shadowstar and breaks any of these rules, stop. Hang up or don’t reply, then contact us directly at contact@shadowstar.io.

How we protect your information

  • Business accounts protected with strong, unique passwords and 2-step verification
  • Only the people working on your request can see your information
  • Encrypted storage and up-to-date devices
  • Remote-access tools removed when the work is done
  • Any access you’ve given us removed at the end of an engagement

If you think you’ve been scammed

  1. Call your bank or card company first, using the number on your card. Ask them to stop or reverse payments.
  2. Change the password on the affected account from a device you trust, and turn on 2-step verification.
  3. Report it to the official sites at ReportFraud.ftc.gov and the FBI’s ic3.gov. If your identity was stolen, use IdentityTheft.gov. We aren’t affiliated with these sites. They’re simply the right places to report.
  4. Then tell us too. We’d like to hear about it, and we can help lock down accounts, clean up devices and make a recovery plan. These scams are built to fool smart people, so there’s nothing to be embarrassed about.

Reporting a security concern about us

If you find a security problem with our website or services, email contact@shadowstar.io with “Security” in the subject line. We’ll respond promptly, and we’ll thank you for it.