Online Security

Most account takeovers start with someone persuading you to hand something over, not with a system being broken into. This page is about spotting that.

What we will never do

• Ask for your password. We cannot read it and we do not need it.
• Ask for a one-time code. The code is for you to type in, never to tell anyone.
• Ask you to move money to a “safe” account. There is no such thing.
• Email you from any address that does not end @grenvillecapitals.com.

If a message does any of these, it is not from us, however convincing it looks.

Signs a message is not from us

• It creates urgency — an account closing, a payment reversing, a deadline in minutes.
• The link text and the actual destination differ. Hover before you click.
• It asks you to confirm details we already hold.
• It arrives about something you did not do.

What protects your account

Sign-in needs your password and a one-time code sent to your email, so a stolen password alone is not enough. Your password is stored hashed, not in readable form. Every sign-in is recorded, and you can see the history on your account.

What you can do

• Use a password you have not used anywhere else. A password manager makes this easy.
• Protect the email account your codes go to as carefully as the account itself.
• Freeze a card the moment something looks wrong — it is instant and reversible.
• Read the transaction history occasionally rather than only the balance.

If something has gone wrong

Freeze your cards, change your password, then email support@grenvillecapitals.com. Do the first two immediately; they do not need us. Tell us what happened and we will freeze the account while we investigate.