Keeping your account safe

What we never ask for

• Passwords for any social account. Spoofy only needs public links.
• Your wallet's seed phrase or private key — not at sign-in, not in the chat, never.
• Your sign-in code. Nobody from Spoofy needs it; don't share it.

If someone asks you for any of these while saying they're Spoofy, it isn't us.

The real Spoofy

• The website is spoofy.social.
• Support on Telegram is @spoofy_support_bot only.

API keys

• A key is shown once, when you create it. We keep only a fingerprint (a hash), so we can't show it to you again.
• Give every program or agent its own key, with a daily cap, a per-order cap or read-only access. See API, SMM tools and AI agents.
• Think a key leaked? Revoke it at once in Developers and make a new one.

Something looks wrong?

Revoke any API key you don't recognise and tell us in the chat. To export or delete your account, ask in the chat too; order and payment records may be kept as long as the law requires.