What should I do if I suspect a phishing email pretending to be trip1?
Don't click any links. Check the sender domain, forward the email to trip1 support, and change your password if you already interacted with it.
Updated
How to spot a fake trip1 email
- Sender domain isn't trip1.com (e.g. trip1-support.co, trip-1.com, or a random personal address).
- Generic greeting ("Dear customer") instead of your name or booking reference.
- Urgent threats or unusual requests ("pay now or lose your booking", "verify your wallet seed phrase").
- Links that don't preview as https://trip1.com/ when you hover over them.
What to do
Step 1: Don't interact
Don't click links, download attachments, or reply. Attachments and links can install malware or lead to fake login pages.
Step 2: Forward it to trip1 support
Forward the full email (with headers if possible) to trip1 support so the security team can investigate and warn other users. Screenshots help if the message uses embedded images.
Step 3: Secure your account if needed
If you clicked a link or entered credentials, change your trip1 password right away, turn on two-factor authentication, and check recent bookings for anything you didn't make.
Important: trip1 will never ask for your seed phrase, private key, or password by email, chat, or phone. Anyone requesting them is trying to scam you.
trip1 phishing emails - FAQ
Real trip1 emails come from a trip1.com sender domain, reference your actual booking reference, and never ask for your password or seed phrase.
Don't enter any details. Change your trip1 password immediately, turn on 2FA if you haven't, and report the email to trip1 support.
No. trip1 will never ask for your seed phrase, private key, or password. Anyone requesting them is trying to scam you.
Forward the full email (with headers) to trip1 support. Include screenshots if the message contained images or embedded links.
