Scams are surging across every corner of the internet. Imposters target users of banks, brokerage apps, social networks—any service that stores personal data or money. Social-engineering attacks, where fraudsters masquerade as legitimate support staff and pressure victims to hand over credentials or transfer funds, account for the majority of customer losses across the industry.

How social-engineering scams unfold

Fraudsters often pose as support staff—sometimes “from Trinity,” sometimes from another well-known company or 3rd party service that might hold your data. Their interactions are predictable:

  1. An unsolicited text, email, or call arrives claiming your account is in danger, including in Teams, which is more likely to be from a guest user.
  2. Urgent warning follows: “Act now or lose your funds or access.”
  3. Pressure to comply—they ask for your password, two-factor authentication (2FA) code, or tell you to provide other sensitive details to verify yourself or your account.

Fact: Trinity will never contact you first to request passwords or codes, or ask that you provide your sensitive information immediately.

How you can keep your identity and funds safe

  1. Secure your account: If you haven’t already, ensure your account is secure and up-to-date by enabling two-factor authentication for login. Hardware keys or Passkeys are the 2FA method we recommend.
  2. Educate yourself about scams: Learn common tactics scammers use to get access to your sensitive information, so you can avoid them when you encounter one:
  3. When in doubt, ask for help: You can always contact our support team via the phone numbers and emails listed on our Help Center.