Trust & Safety
Security & Incident Response
নিরাপত্তা ও ইনসিডেন্ট রেসপন্স
What to do if your account is compromised, you are being impersonated, or you have been defrauded — and what NFF can and cannot do.
If your NFF account is compromised
- Change your password immediately and review your active sessions.
- Report it from the Safety Centre so the desk can lock the account and preserve evidence.
- Any credential issued during the compromise can be suspended and reissued.
Phishing, scams and impersonation elsewhere
- Keep the evidence: screenshots, links, transaction references and the account handles involved.
- Report the account to the platform it is on, and to us if it impersonates NFF or an NFF officer.
- Do not send further money and do not share OTPs with anyone claiming to help you recover funds.
The limits of our role
- NFF Bangladesh is not a police force and not a cybercrime authority, and does not claim to be.
- We provide lawful guidance and, where appropriate, direct you to the authorised authority.
- We can act on anything that happens on this platform, and on misuse of the NFF name.
Responsible disclosure
- Vulnerability reports are acknowledged within three working days.
- Do not access, modify or publish other members' data while testing.
- Researchers who report responsibly are credited.
Tools you have
- Report an incident
- Review sessions
- Request credential suspension
Actions the safety desk can take
- Account lock
- Credential revoke and reissue
- Incident log
- Disclosure handling
Report something under this policy
Reports filed here cover Phishing or malware, Impersonation, Scam or fraud. Sign in first so we can notify you of the outcome and so you can appeal if you disagree with it.