Skip to main content

Is this email really from Arch?

How to recognize phishing and confirm a message came from us

Phishing is common in crypto. Scammers send emails, texts, and DMs that copy a company’s name, logo, and tone to get you to click a link, download a file, or share your login details. If you’re not sure a message is really from Arch, here’s what to check.

What Arch will never do

  • Ask for your password, 2FA codes, or seed phrase, by email, phone, text, or any other channel

  • Ask you to install software or give anyone remote access to your computer

  • Pressure you to act within a deadline or risk losing access to your account

If a message asks you to do any of these, it isn’t from us.

Check the sender address

Real Arch emails come from an address ending in @archlending.com. Look at the full sender address, not just the display name, since a display name can say “Arch” even when the address behind it doesn’t. Watch for look-alike domains that add words or swap the ending.

Check the link before you click

On a computer, hover over a link to see where it really goes. On a phone, press and hold the link. Our sites are:

A link like archlending.com.example.net is not ours. If you’re not sure, skip the link. Type archlending.com into your browser yourself and log in from there.

Be careful with attachments and downloads

Phishing emails often push you to “download,” “review,” or “sign” a document, usually with a deadline. Some of these files can install software on your computer. If you weren’t expecting a file, don’t open it.

Red flags to watch for

  • Urgent deadlines or threats to restrict your account

  • Tax or investing advice

  • Generic greetings, odd formatting, or small spelling mistakes

  • A sender or link that’s almost, but not quite, archlending.com

If you get a suspicious message

  • Don’t click links, download attachments, or reply.

  • Mark it as phishing or spam in your inbox.

  • Forward it to [email protected] so we can look into it.

If you think you clicked something

Contact us right away. We’ll help you lock down your account. In the meantime, it’s a good idea to:

Still not sure? Ask us.

We’d much rather confirm a real email than have you fall for a fake one. Reach us at:

Did this answer your question?