Quick answer: Use a unique password, never share your wallet seed phrase, only trust contract and vault addresses shown inside your logged-in dashboard, and treat any DM offering help or "support" with suspicion.
Ask for your wallet seed phrase or private key
Ask for your password
Send you a contract address, vault address or payment request by direct message
Ask you to pay a fee to release a payout
Use a long, unique password and a password manager.
Log out on shared devices.
Check the address bar: make sure you're on the official ClubAffili domain before logging in.
Write your seed phrase down offline. Anyone with it controls your tokens.
Read every wallet prompt before approving. A stake transfer goes to the vault address shown on the Staking page — nothing else.
Verify the Club Token contract address from the Club Token page in your dashboard before swapping on Uniswap.
Consider a hardware wallet for larger balances.
Stakes are accepted only from your saved wallet, and payouts are sent only to it.
Every on-chain transfer is verified by ClubAffili's own servers before it counts.
Payouts are reviewed by an authorised operator and the amount comes from ClubAffili's records, not the browser.
Login attempts are rate-limited and sensitive admin actions are audit-logged.
Change your ClubAffili password immediately.
Move tokens to a new wallet you control and update your saved wallet in your profile.
Contact support so we can put a hold on payouts while you secure the account.
