A balance is value, and the account controls more than rewards.
THE BASICS
A long, unique password not reused anywhere Two-factor authentication under Account > Security Settings The backup code stored somewhere safe A contact email you actually monitor, on a domain we do not host
WHY IT MATTERS
Someone with access to your Client Area account could redeem your balance, and could also reach your services, your domains and your billing. The rewards balance is the least of it.
WHAT TO WATCH FOR
Redemptions you did not make Balance changes you cannot account for in the history Login notifications from locations you do not recognise Emails about programme changes you did not initiate
PHISHING
Messages claiming you have a large rewards balance expiring today, requiring urgent login, are a standard attack. Log in by typing the address yourself and check inside your account.
We will never ask for your password by email.
IF SOMETHING LOOKS WRONG
Change your password, enable two-factor authentication, and open a ticket.