If a message, call or email claims to be from Calen and asks for the wrong thing, it isn't us. Knowing what we'll never ask is one of the best ways to stay safe.
We will never
Ask for your password, PIN, one-time code, authenticator code or backup codes
Ask you to read back a code we've just sent you, or to "confirm" it with someone who contacted you
Ask for access to your device, or ask you to install remote-access software such as AnyDesk or TeamViewer
Ask you to move money urgently, "test" a payment, or send funds to a new account to keep your account open or to cancel a transaction
Ask you to pay a fee, tax or release charge to a personal account, wallet or gift-card seller so you can receive your own money
Contact you from a free or personal email address (for example Gmail, Outlook or Yahoo) as if it were official Calen support
Rush you into acting before you've had time to check, or tell you not to speak to anyone else
If any of that happens, stop. Don't reply, click or send money. Contact us only through a channel you already trust.
How we'll get in touch
These are safe starting points:
The website you open yourself at https://calen.finance, or https://app.calen.finance for the business dashboard
The official Calen app from the App Store or Google Play
Email from an address that ends in @calen.finance. Still be careful, because display names and even addresses can be faked. If the tone feels wrong, don't click. Sign in separately and contact us from there
In-app chat, once you're signed in
We may send you an SMS code when you use 2FA. We won't ask you to handle a security issue only on WhatsApp, Telegram, SMS or a social network.
Good to know: Watch for a website that isn't exactly https://calen.finance or https://app.calen.finance. Extra words, a slightly different spelling, or a different ending are warning signs.
Quick tip: A caller who already seems to know your name or a recent transaction isn't proof it's us. That information can be guessed or gathered.
What's next: If you've already shared a password or code, change it, then see What to do if you think your account has been compromised, and How to report suspicious activity.