Retail traders are a target. Where money moves, scammers follow — and the modern ones are polished, patient and running on social media. The good news: almost all of it is avoidable with a handful of habits. Treat the list below as a checklist you run once, then revisit every few months.
Layer 1 — Lock down your accounts
Your brokerage login is the front door to your money. Make it hard to kick in.
- Use a unique, strong password for every financial account — never the one you reuse elsewhere. A password manager makes this effortless.
- Turn on two-factor authentication (2FA). Prefer an authenticator app or a hardware key over SMS, which can be intercepted via SIM-swapping.
- Secure the device and the email tied to your broker. Your inbox is often the real key — if someone owns your email, they can reset everything else.
- Only use official apps and the real website. Download from the official App Store or Google Play, and type your broker's address yourself instead of following links.
Your email is the master keyProtect the email address linked to your broker with the same care as the broker itself — unique password, 2FA, and a lock screen on every device that can open it.
Layer 2 — Spot the scams
Most trading scams sell the same thing: certainty. Real markets don't offer it, so anyone who does is selling a story. Learn the shapes and they become easy to walk past.
"Signal groups" and copy-a-guru
A charismatic account posts screenshots of huge wins and invites you to a paid group for their "calls". The wins are cherry-picked or fabricated, the losses vanish, and the real business model is your subscription — or getting you into a coin or stock they already hold. If someone were reliably that good, they wouldn't need your monthly fee.
Pump-and-dump and "hot tips"
A little-known stock or token suddenly floods your feed as "about to explode". Insiders bought early, hype pushes the price up, and when retail piles in, they sell into you — the "dump". The tell is manufactured urgency around an asset you'd never otherwise have heard of.
Phishing and fake apps
An email or DM warns of a "problem with your account" and links to a login page that looks perfect — but the address is subtly wrong. You enter your credentials and hand them straight to the attacker. Fake broker and wallet apps do the same thing in the app stores.
The universal red flagsGuaranteed returns. Pressure to act "right now". Requests to move money off-platform or into crypto to "get started". Anyone messaging you first with an opportunity. Any one of these is enough to walk away.
Layer 3 — Protect your data
Your trading history is sensitive: it reveals your net worth, your positions and your habits. The safest data is the data you never hand over.
- Be stingy with connections. Every app you link to your brokerage is another company that can be breached. Prefer tools that don't need your login at all.
- Prefer local-first tools. Software that keeps your records on your own device — with no account and no cloud — can't lose data it never collected.
- Keep your own backups. Export your journal and records periodically, and store the file somewhere you control.
- Keep clean records for tax. Good record-keeping isn't just tidy — it protects you if your numbers are ever questioned.
Privacy by design beats privacy by promiseA tool that stores your trades on your device, with no account to hack, protects your data by architecture — not just by policy. That's the standard worth looking for.
The safety mindset
Finally, the safety layer people skip: only risk money you can genuinely afford to lose, keep trading capital separate from money you need to live, and be honest that leverage cuts both ways. No security setting protects you from a position that was too big to begin with — which is exactly why risk management and safety are two halves of the same habit.
Key takeaways
- Unique passwords, app-based 2FA, and a locked-down email protect the front door to your money.
- Signal groups, pump-and-dumps and phishing all sell certainty and urgency — the universal red flags.
- The safest data is the data you never share — prefer local-first tools and keep your own backups.
- Only risk what you can afford to lose — safety and risk management are the same habit.
A journal that keeps your data yours
Sereo is offline-first and private by design — no account, no cloud, no broker login. Your trades stay on your device.
This article is educational and does not constitute investment, security or legal advice. If you believe an account has been compromised, contact your provider directly using their official channels.