Where card details belong
A legitimate payment page can request the required card information to complete a checkout. Check the merchant domain, purchase amount and order details before you enter it. Avoid entering details into forms opened from unsolicited links.
Where card details do not belong
Support staff should not need your full card details in a direct message. Do not post them in a public chat, send screenshots to a stranger or store them in an unsecured note. Never combine card details with a recovery phrase or private key.
Reduce exposure
- Use a screen lock and keep the device updated.
- Check merchant and Telegram account names carefully.
- Review transactions and available card controls routinely.
- Use a trusted browser and avoid unknown extensions at checkout.
If a request feels urgent or bypasses the normal checkout, pause and reopen the official site or bot yourself.