Never share verification codes
Legitimate support teams should not ask for passwords, one-time codes, private keys or recovery phrases.
Confidence begins with informed choices.
Security education is an essential part of the GHB corporate experience. This section explains safe account habits, warning signs of phishing, and the distinctive risks of crypto networks. Technical architecture, custody arrangements and insurance claims described in the concept document must be independently verified before being presented as operational security features.

Simple habits that make a meaningful difference.
Legitimate support teams should not ask for passwords, one-time codes, private keys or recovery phrases.
Open banking services through trusted bookmarks and independently verified domains. Be cautious of links sent unexpectedly.
Do not send funds to a so-called safe account. A future official fraud channel must be verified before any reporting instructions are published.
Network accuracy matters as much as account security.
Bitcoin network addresses and transactions are not interchangeable with Ethereum ERC20 or TRON TRC20 destinations.
ERC20 and TRC20 stand-ins are separate testnet representations. Selecting the wrong network in a real system can lead to unrecoverable loss.
The simulated project must display clear testnet identifiers and should never present demonstration balances as spendable real assets.
Discover connected financial services spanning everyday banking, international solutions and digital assets.
Client digital assets are intended to be held in multi-signature or MPC wallet infrastructure, with the majority in cold storage. Client assets are intended to be strictly segregated from GHB's own assets at all times, under both the onshore and offshore perimeters. VARA mandates multi-signature or MPC security and strict segregation, and DFSA/FSRA rules impose parallel custody standards on the offshore entity. GHB's architecture is built to exceed those requirements, not merely meet them.
GHB will maintain insurance coverage for client digital assets covering a minimum of 10% of average client assets, as required under VARA rules. The intended offshore entity will maintain parallel coverage consistent with DFSA or FSRA requirements. Details of the insurance arrangements are available to clients on request.
How to recognise phishing, secure your GHB account, and protect your crypto wallet. Step-by-step guides in the GHB app and on the Security & Awareness page. We run regular phishing simulations and security-awareness content for all customers globally.
A 24/7 fraud and security hotline accessible from any country. In-app reporting for suspicious activity. A commitment to acknowledge every security report within 2 hours and to provide a substantive response within 24 hours.
We will never ask for your password, your private keys, or your one-time passcode by email, phone, or SMS. We will never ask you to move funds to a "safe account." If someone claiming to be from GHB does any of these things, they are not from GHB.