A mandatory pause on resets, especially banking.

How a reset drains an account

An attacker doesn't need your card or your password. They trigger “forgot password” on your bank or exchange, the reset email lands in a recovery inbox they've quietly gained access to, and within minutes they own the account, and the money in it. By the time the alert reaches you, it's gone.

A hold on the emails that move your money

SAFE2RECOVER holds any reset for your finance accounts until you approve it, so nothing can happen in the heat of an attack. It's the same circuit-breaker principle regulators are now adding to bank transfers, brought one step earlier, to the recovery itself. See how the hold works →

Know the moment it happens

On paid plans the approval request is texted to your phone the instant a reset lands, so a quiet attempt on your bank account meets you, not your inbox. Approve it in seconds when it's really you; ignore it when it isn't, and the reset link expires unused.

Official help and reporting

These are the official Australian services. They are free and they are the ones to trust:

• Moneysmart: financial scams, the ASIC guidance on scams that go after money.
• Moneysmart: investment warnings, current warnings about investment offers and companies.
• Scamwatch: report a scam, the national form for reporting a scam.
• IDCARE, free support for people whose identity or accounts have been misused.
• Services Australia: scams and identity theft, what to do when government accounts or details are affected.