Spotting a phishing attempt: what Noryo will never ask for

Phishing means tricking you into handing over your codes or password by pretending to be Noryo. One simple rule protects you: there are things Noryo will never ask you for. If someone asks for them, it is a fraud attempt.

What Noryo will never ask you for

Whether by email, phone, chat or message, Noryo and its support team will never ask you for:

• <strong>Your password.</strong>
• <strong>A code received by SMS or email.</strong>
• <strong>A backup code.</strong>

These codes are only ever entered inside the Noryo app, on a screen you opened yourself. No one, not even support, ever needs you to share them.

Why your account stays protected

Even if a fraudster knew your email or phone number, they could not take over your account. Regaining access requires proving your identity with a strong method: a backup code, approval from a device already signed in, or a passkey. These proofs rely on things only you hold.

As a last resort, an exceptional recovery can be opened, but it never grants access automatically: it opens a case verified by your trusted contacts, with a mandatory 72-hour security delay. You are notified as soon as it opens, and a "This wasn't me" link permanently freezes the request. Support has no button to bypass these checks.