Common ShreeWin phishing signs
Be careful when a message creates urgency, promises a guaranteed reward or says your account will close unless you login immediately. Misspelled domains and copied logos are common on fake pages.
A support representative should not ask for your password, OTP, UPI PIN, card PIN, withdrawal password or remote-screen access.
- Unfamiliar domain
- Shortened download link
- Guaranteed bonus or result
- Urgent closure warning
- Request for OTP or PIN
- Remote-access request
Check a login or registration link
Read the complete address in the browser before entering a phone number, email or password. Do not rely only on the page colour, logo or title because these can be copied.
Open account links from a source you saved or recognise. If the domain changes during a redirect, stop and verify it before continuing.
Fake APK and update messages
Do not install an APK received from an unknown contact or group claiming to offer fixed games, extra balance or withdrawal unlocks. Keep Play Protect enabled and check the app name and permissions.
Use the APK Safety guide before installation. An urgent update should not require an OTP or ask you to disable all phone security.
Gift code and support scams
A fake gift-code message may ask for a deposit, OTP or login screenshot before revealing a code. Use Gift Code inside Settings and check the current promotion conditions.
For support, use the button displayed inside ShreeWin. Stop a private conversation when someone asks for secret account or payment information.
If you entered details on a fake page
Change the account password immediately from a clean device. Change any other account using the same password and check recent ShreeWin, bank, UPI and email activity.
Contact support or your payment provider when you see an unknown transaction. Keep the fake URL, message and reference as evidence, but do not revisit the harmful link.
Report a suspicious link safely
Send the complete URL and a screenshot to the proper platform support without including your password, OTP or PIN. Report harmful messages to the service where you received them.
You can also report a deceptive page through your browser or search engine. Avoid testing the form with real information.