Spotting a phishing attempt: what Noryo will never ask for
Noryo will never ask for your password or your codes. Here is how to spot a phishing attempt and why your account stays protected.
Phishing means tricking you into handing over your codes or password by pretending to be Noryo. One simple rule protects you: there are things Noryo will never ask you for. If someone asks for them, it is a fraud attempt.
What Noryo will never ask you for
Whether by email, phone, chat or message, Noryo and its support team will never ask you for:
- Your password.
- A code received by SMS or email.
- A backup code.
These codes are only ever entered inside the Noryo app, on a screen you opened yourself. No one, not even support, ever needs you to share them.
A message pressuring you to share a code to "verify your account" or "unblock a payment" is a fraud. Share nothing and close the conversation.
Why your account stays protected
Even if a fraudster knew your email or phone number, they could not take over your account. Regaining access requires proving your identity with a strong method: a backup code, approval from a device already signed in, or a passkey. These proofs rely on things only you hold.
As a last resort, an exceptional recovery can be opened, but it never grants access automatically: it opens a case verified by your trusted contacts, with a mandatory 72-hour security delay. You are notified as soon as it opens, and a "This wasn't me" link permanently freezes the request. Support has no button to bypass these checks.
If a message looks suspicious, do not reply and do not click any link. Open the Noryo app yourself: any legitimate request will be waiting for you there.