Quick answer: Use a unique password, never share your wallet seed phrase, only trust the contract and staking addresses shown inside your logged-in dashboard, and treat any DM offering help or "support" with suspicion.
ClubAffili will never
Ask for your wallet seed phrase or private key
Ask for your password
Send you a contract address, staking address or payment request by direct message
Ask you to pay a fee to release a withdrawal
Protect your login
Use a long, unique password and a password manager.
Turn on two-step verification in Menu → Security.
Log out on shared devices.
Check the address bar: make sure you're on the official ClubAffili domain before logging in.
Protect your wallet
Write your seed phrase down offline. Anyone with it controls your tokens.
Read every wallet prompt before approving. A stake transfer goes to the staking address shown on the Staking page — nothing else. The wallet verification signature never moves tokens.
Verify the Club Token contract address from the Club Token page in your dashboard before swapping on Uniswap.
Consider a hardware wallet for larger balances.
How ClubAffili protects you
Stakes are matched to you only when they come from a wallet you have verified with a signature, and withdrawals are sent only to your verified payout wallet.
Every on-chain transfer is verified by ClubAffili's own servers before it counts.
Withdrawals are checked by an authorised operator and the amount comes from ClubAffili's records, not the browser.
Login attempts are rate-limited and sensitive admin actions are audit-logged.
If you think you've been compromised
Change your ClubAffili password immediately (Menu → Password).
Move tokens to a new wallet you control and set it as your payout wallet in Menu → Payout destination.
Contact support so we can put a hold on withdrawals while you secure the account.