Basics
- A unique password, not reused from another site. Most account compromises are credential reuse after a breach somewhere else.
- Two-factor authentication, under Settings → Security, once available.
- Sign out on shared devices.
- Never share your password. Researchor will never ask for it.
Warning signs
Sign-ins you do not recognise, messages you did not send, changed payout details, or a password-reset email you did not request.
That last one matters: a reset email you did not ask for means someone has your email address and is trying. Change your password and enable two-factor.
If your account is compromised
- Change your password immediately.
- Check your payout accounts under Bank Details and remove anything you did not add.
- Write to support@researchor.org.ng from the email on the account.
We can suspend an account quickly to stop further activity. Tell us early rather than after a payout leaves.
Payout safety
Treat a request to change payout details as high-risk. If a message asks you to update bank details, verify it independently.