How can we help?

Phishing is an attempt to trick a person into disclosing credentials, opening a malicious link, or performing an unauthorized action. Attackers may impersonate legitimate services, employees, administrators, or support representatives. Protecting your Polyosync account requires verifying authentication requests and treating unexpected communications carefully. Common phishing warning signs 1. An unexpected request for your password. 2. A message claiming your account will be deleted immediately unless you sign in. 3. A link that leads to an unfamiliar domain. 4. An attachment you were not expecting. 5. A request to share a recovery code or authentication token. 6. A message pressuring you to bypass normal security procedures. 7. A sender whose address does not match the claimed organization. 8. A request to approve an action you did not initiate. How can I verify that I am accessing Polyosync? Check the website address carefully before entering credentials. The official Polyosync website uses the polyosync.com domain. Be cautious of lookalike domains, unusual spelling, and unexpected redirects. If you are unsure about a link, navigate to the known website address directly rather than following the suspicious message. Will Polyosync Support ask for my password? You should never disclose your password to Support. Passwords and authentication secrets must remain confidential. What should I do if I receive a suspicious message? Step 1: Do not click unfamiliar links. Step 2: Do not open unexpected attachments. Step 3: Do not disclose credentials or verification information. Step 4: Verify the sender independently. Step 5: Contact your organization's security administrator if relevant. Step 6: Report the suspicious communication through an appropriate support channel. What if I already entered my password on a suspicious website? 1. Change the affected password through the legitimate account recovery or change process. 2. Change the password on any other service where it was reused. 3. Secure your associated email account. 4. Notify the appropriate security administrator. 5. Review related account and integration access. 6. Contact Polyosync Support if unauthorized access may have occurred. What if someone asks me to share an API key? Treat API keys and access tokens as sensitive credentials. Do not send them through untrusted messages or to unverified recipients. Can phishing affect Enterprise organizations? Yes. A compromised employee or administrator account may create risks for business information and operational systems. Organizations should provide appropriate security awareness training and establish incident reporting procedures. Recommended practice Verify the destination before signing in, use unique credentials, and never disclose passwords or authentication tokens in response to unsolicited requests.