Como reconhecer e denunciar e-mails ou mensagens suspeitos para evitar golpes?

If you receive a suspicious email or message that seems to be from Wish or Wish employees, and the message requests that you provide passwords, verification codes, API access token, or API client secret, be vigilant. The email may be a scam.

How to distinguish between suspicious emails and legitimate messages from Wish?

Fraudsters create fake email accounts to pose as Wish employees, in the hope that recipients will reply or click on a link or attachment, and provide confidential information including passwords and verification codes of any accounts, or API access token and API client secret. These emails or messages often contain the following:

• Requests for password or verification codes
• Offering paid services outside of the Merchant Dashboard portal

If you receive a message from “Wish employees” or anyone else asking you to share passwords, verification codes, API access token, or API client secret, do not reply directly, because Wish never asks merchants for the following details via emails or external communications outside protected merchant portal (such as Merchant Dashboard):

• Wish Merchant Password
• Senha de e-mail, banco ou outras contas pessoais.
• Códigos de verificação
• Token de acesso à API
• Segredo de cliente da API

How to report potentially fraudulent / scamming emails or messages:

If you receive a suspicious email or message that requests passwords, verification codes, API access token, or API client secret, and are unsure of the legitimacy of the message, you should report it to us immediately. Here's how:

• Em primeiro lugar, não clique em nenhum link nem abra quaisquer anexos no e-mail.
• Reach out to merchant_support@wish.com (General Support) or merchant-support@wish.com (CN General Support) and include the suspicious message as an attachment so we may investigate further.