Secured customer - good practices

• Use only legal software from a trusted source.
• Use additional software and solutions (e.g. anti-virus, firewall, anti-spam) to protect computers and mobile devices and filter out unwanted content. Keep your anti-virus software regularly updated.
• Regularly update the software on your phone and computer.
• Do not log in and do not use the transaction service on computers shared in public places (e.g. in Internet cafes). Never connect with Conotoxia.com via untrusted networks, e.g. available in hotels, airports, open hotspots.
• Avoid remembering login pages and using bookmarks for transaction services.
• When having an active session at Conotoxia.com, avoid using other websites at the same time. Do not leave your computer unattended if you are logged in.
• Always log out when you finish an operation/use of a service or application.
• Conotoxia never asks to install additional software or applications to provide better and faster operation of the service or applications.
• Never install an app on your computer or phone at the request of someone you do not know. Criminals may want to remotely access your device using apps like AnyDesk, QuickSupport, TeamViewer.
• Download applications and programs only from official sources. You should download applications from authorized stores.
• Be cautious about downloading applications that require access rights to read and send text messages. Pay attention to the range of permissions of the installed applications.
• Do not connect external data carriers to your device if you are not sure of their security.
• Do not change your device's security settings, especially do not remove the restrictions imposed by the manufacturer.

• Regularly change passwords to access the Conotoxia.com portal and mobile apps often.
• Use complex (strong) passwords. Make sure they are difficult to guess.
• Password should consist of min. 8 characters (12 recommended), including 1 capital letter, 1 number and 1 special character e.g. "$". You can also use password generation software, e.g. LastPass, KeePass.
• Use unique passwords (do not use passwords used in other systems/services, e.g., email).
• Please note that Conotoxia will never ask for authorisation details: password, pin number or one-time code in emails or other communications.
• Do not write down or save passwords in an open form.
• Disable the function in your browser to remember passwords.
• Do you suspect someone may have found your passwords to your email account or the / Portal? Change them to new ones as soon as possible.

• Check the validity of the Conotoxia.com website you are connecting to. Verify that the address starts with https:// (https://conotoxia.com/), that the certificate is valid and issued to Cinkciarz.pl. You can verify our certificate details by clicking on the padlock icon at https://conotoxia.com/.
• Verify URL addresses of pages you visit.
• Do not enter sensitive data at untrusted sites. When ordering transactions, avoid copying account numbers ("copy-paste"), enter them manually and verify them carefully. After entering the account number, check its correctness before you confirm the operation.
• Do not click on suspicious links

• Review the history of operations on an ongoing basis.
• Verify recipients and accounts connected with the profile. If you do not use a given recipient, remove them.
• Actively manage transaction limits, set them to suit your current needs.
• Carefully read and verify the contents of authorization notifications -check if they match with what you instructed in the transaction service.
• Report all suspicious and unusual system behaviour to Conotoxia.com immediately.

• Be careful when you receive unusual emails (e.g., those that tell you to take immediate action, complete a financial obligation, confirm a password operation on an unusual page, open an attachment secured with a password, personal identification number or other login information, etc.).
• Do not open messages (and their attachments) received by email from unknown senders.
• Pay special attention to attachments having several file extensions simultaneously, e.g. transfer.pdf.zip, payout.jar.doc, confirmation.exe.pdf.
• Verify that the actual link address (link) is consistent with the one you see in the body of the email (verify by moving your cursor to the link and highlighting the address).

• Do not disclose any private information without being sure who you are talking to.
• Never trust someone who asks you for confidential information.
• Our employees never ask for your confidential data (e.g. passwords, codes, PINs).
• If you doubt whether we initiated a call, please contact us using the numbers provided at https://conotoxia.com/contact-us.
• Be vigilant, don't succumb to pressure, keep your distance from telephone contacts offering investment intermediation - for more on this see the Polish Financial Supervision Authority publication https://inwestujswiadomie.com.pl/.

Find out how to use your payment cards safely at https://conotoxia.com/about-us/security/card-fraud-prevention

• If you have been assigned a PESEL number, use the government's service to block it to prevent unauthorised borrowing from our web portal or the conclusion of a payment account agreement (applicable to web portal Users who are consumers).
• Blocking the PESEL is a free service available to anyone to whom it has been issued.
• Information on how to block the PESEL can be found at https://www.gov.pl/web/gov/zastrzez-swoj-numer-pesel-lub-cofnij-zastrzezenie.
• You can check who, when, and for what reason verified your PESEL number in the mObywatel mobile app or at mObywatel.gov.pl.