Skip to contentStaying safe (the short, serious one)
Six rules, one principle: you trade only on the rails, and the rails cannot leave you paid-but-empty. Everything else follows from that.
6 min read·Everyone·6 steps
01Nobody from Bifrost will ever message you first#
Not by phone, not by text, not in a chat, not by an email that asks you to act. There is no “Bifrost security team” that calls about suspicious activity, no agent who needs to “verify your wallet”, no deadline. If someone contacts you claiming to be us, they are not us — end the conversation without guilt. When you want support, you come to us, from a page you navigated to yourself. That direction of travel — you to us, never us to you — defeats most scams outright.
02How your money and coins are actually held#
Be clear-eyed about this, because it keeps you safe. Your USDC and your coin certificates both sit in your own wallet — the one created when you signed in, or the one you connected — and only you can unlock it. No one at Bifrost can spend your balance or move your certificates on their own. What Bifrost does is settle trades on your behalf: when you sign to buy or sell, it relays that one authorisation and pays the gas. So the honest rule is not “no one can ever touch anything” — it is that money and coins move only when you sign, always for value in return, and every step is recorded openly on Base for you to check. If your wallet is the embedded one, you can export it and hold the keys directly whenever you wish.
03Verify anything, in ten seconds#
Anyone selling you a Bifrost coin — here or anywhere else — should be able to show you its certificate id. Type it into the verify page and you will see, straight from the public record: the coin, its edition, whether it sits in the vault, and who currently owns it. It is free, takes ten seconds, and needs no account. If the id shows nothing, or the details do not match what you were told, walk away — and report it on that same page.
04Too good to be true still isn't true#
The oldest scams wear the newest clothes. Someone offering far above market for your coin “if you just pay a release fee”. A stranger selling a $2,000 coin for $400 “because they need cash today — off the platform”. A site that looks like Bifrost with a slightly different address. Remember: on-platform, Bifrost settles every trade so that paying and receiving stand or fall together — you are never left paid-but-empty, holding neither coin nor money. Off-platform, no such promise exists. If a deal only works by leaving the rails, that is the deal telling you what it is.
05Guard the device, not just the account#
Your sign-in is only as strong as the device that holds it. Keep a screen lock on. Keep a way back in — your login with Google, Apple or email, or an exported copy of your wallet kept somewhere safe. Treat a lost phone the way you would a lost keyring — calmly, but the same day: sign back in on another device. When your wallet is unlocked by a passkey or your login, no word or number that a stranger could talk out of you opens your account; that is the strength of the design. Your security is a habit, not a secret.
06If something feels wrong#
Stop. Nothing on Bifrost ever requires urgency — no deal expires in minutes, no account gets “suspended unless”. Check any certificate on the verify page. Report anything suspicious there, or write to the support desk at /support, and a person reads it — the same operations team that runs the vault. You will never be made to feel foolish for asking; the questions that feel silly are the ones scammers rely on you not asking. Worried and wrong is a far better outcome than polite and robbed.