Immediately activate 2FA on email, exchange accounts, and all crypto platforms. Use an authenticator app rather than SMS when possible—it protects against SIM-swap attacks.
Treat the fact that attackers know your shipping address as a permanent change in your threat model. Consider using a PO box for future hardware wallet orders or other high-value purchases.
Scammers will send emails posing as Trezor or SafePal support, offering fake security updates or recovery services. Don't click links in unsolicited emails—go directly to official websites instead.
Check credit reports for unauthorized activity. The exposed personal information could be used for identity theft. Consider placing a fraud alert with credit bureaus.
Use separate email addresses for different crypto platforms so a single breach doesn't give attackers access to everything. Keep your crypto spread across multiple locations and providers.
Read More →