What to remember
- PasswordA strong secret code, never shared, entered only on paytrip.app.
- PhishingPayTrip will never ask for your login details or bank information by email.
- ReportingForward any suspicious message to abuse@paytrip.fr, without clicking the links.
How do I choose a password?
Your secret code is the first line of defence for your account.
- Your secret code must have at least 8 characters and include at least one number, one lowercase letter, one uppercase letter and one special character (& % _ ! ? …)
- Never share it with anyone, and change it regularly
- Avoid number sequences (123)
- Enter it only on secure PayTrip pages such as paytrip.app with the https:// prefix
- Avoid combinations that are easy to guess (your date of birth, those of people close to you, phone numbers…)
What is phishing?
Phishing is a technique used by fraudsters to obtain confidential information: password, login details, bank details.
Also known as “hameçonnage” in French, phishing is a scam in which the sender impersonates your bank, internet or electricity provider, social security body and so on, to get you to enter confidential data or visit a malicious site.
The fraudster then uses the data collected to hack your bank account, install malware on your device, or even steal your identity — a scam that is hard to reverse and has serious consequences.
As a PayTrip customer, you are a privileged target and must remain extremely vigilant to protect your account and your beneficiaries.
Can PayTrip ask for my login details?
Never. PayTrip will not ask you to confirm your bank details or login credentials by email.
If an email asks for this information, it is a fraud attempt.
- Check the origin of the email. Official PayTrip emails come only from an @paytrip.fr address. Otherwise, it is fraud.
- Forward the fraudulent email to abuse@paytrip.fr
- Mark the email as spam in your mailbox to block future attempts from the same domain.
How do I spot a suspicious email?
Pay attention to the wording, external links and attachments.
Fraudsters copy the visual identity of a well-known site to hook their victim; they write from an email address that does not belong to the company. The same goes for URL links that point to sites whose domains are clearly wrong. Do not click the link.
- Forward the fraudulent email to abuse@paytrip.fr
- Mark the email as spam in your mailbox.
Should I believe miraculous gifts?
No. Believing you have won a contest you never entered leads to a scam.
PayTrip is a responsible company and will never offer miraculous gifts to its customers or beneficiaries.
- Forward the fraudulent email to abuse@paytrip.fr
- Mark the email as spam in your mailbox.
How can I protect myself?
A few habits are enough to reduce the risk significantly.
- Use a browser anti-phishing extension, which provides a first level of warning when you try to visit a compromised site.
- Do not click links in emails you are unsure about or did not request. Do not open attachments if you do not know the sender. Do not provide sensitive information in reply to a follow-up.
- Watch the sender’s email syntax. Private addresses (for example .gmail, .yahoo and other .orange.fr) should alert you.
- Always check the URL of the site you are being sent to.
- Contribute: everyone can and should take part in the fight against phishing by reporting it on the dedicated government website phishing-initiative.fr/contrib.