How do I know a message is really from PandaPlay?

Four things we never do

1. We never message you first asking for credentials. Not a password, not a two-factor code, not a backup code. If a message opens that way, it is not us.
2. We never take payment outside the checkout page. No crypto to a personal wallet, no gift cards, no bank transfer, no “pay me directly and I will discount it”. Every real payment happens on Stripe, PayPal or our crypto provider’s own page.
3. We never move your order into a private DM. Your order is handled in the thread it started in, or by email from an address ending @mypandaplay.com.
4. We never ask you to turn two-factor off. See how we handle two-factor codes.

How to check

• Look at the domain, not the display name. Display names are free to copy; mypandaplay.com is not. Watch for near-misses like mypandapiay or mypandaplay-support.
• Ask them for your order number and what was on it. Whoever is really handling your order has it; an impersonator scraping a public channel does not.
• Go back through the site. Rather than replying to a message, open your order from Orders and continue from there. That path cannot be faked.

Reporting one

Screenshot it and send it to support@mypandaplay.com. We will report the account and warn people in our Discord. If you have already sent something, change that password immediately, revoke active sessions on the platform, and tell us — the sooner we know, the more of it we can help you contain.