On October 15, with the help of independent security researchers, we found a vulnerability affecting one of the integrations used on the ChangeNOW website. The team has fixed the vulnerability now.
We currently have no evidence that someone exploited it. But we also can’t assume that the researchers who reported it were the only ones to find it. Because of that, we’re looking at the possible scenarios. We are also warning clients about information that could have been exposed. This may include email addresses and transaction details.
Please note that the vulnerability did not affect ChangeNOW’s transaction infrastructure, and customer funds were never at risk.
ChangeNOW Warns Users About Phishing Messages and Fake Support Emails
The main thing clients should watch out for now is suspicious or fraudulent messages. A phony message could reference real transactions or support to appear legitimate. Suppose you receive an unexpected message that appears to be from ChangeNOW. Please verify the sender before responding, clicking any links, or providing any information.
We contact clients exclusively via [email protected]. Besides, we will never ask for a private key, seed phrase, or any password via email. You should also avoid downloading weird files or attachments, or sharing verification codes with unknown contacts.
In case you receive a message that creates urgency or threatens account restrictions, verify it with ChangeNOW’s official support team. You should report suspicious communications to the team. It can help the team investigate potential impersonation attempts and protect other users from similar scams.
People contact our support and compliance teams because they trust us with information they would not share publicly. We also understand the responsibility that comes with that. We have no indication this vulnerability was exploited. However, we believe it is important to warn of potential risks rather than wait until there is absolute certainty.
ChangeNOW Launches NOW AI to Strengthen Security Across Its Products
Our clients are at the center of what we do, and we continue to upgrade the protection of our products. One of the actions we are taking is the launch of NOW AI. It is a dedicated protection lab with a mission to raise the security standard across all ChangeNOW products.
We want to apply the same technology to the defensive side to spot danger earlier and bake in stronger security into our products, especially as AI makes malicious actions easier to automate and scale.
Today’s case only made the need to move faster more obvious, and it accelerated the launch of NOW AI. This initiative reflects ChangeNOW’s broader focus on proactive threat detection, faster security responses, and stronger safeguards across its services.
By implementing AI-driven defensive tools, the team aims to identify emerging risks earlier. Thus, it can reduce opportunities for attackers to exploit vulnerabilities as malicious techniques become more sophisticated.
We’ll publish more details on our plans, what it covers, and how it will be used across ChangeNOW on a dedicated page on our website soon. Stay tuned.
