01 / PAUSE
Keep the message
Save the sender details, subject and date. A familiar name, logo or email address does not prove a message is genuine.
THE BRITISH BLOCKCHAIN ASSOCIATION · SECURITY
Verify a BBA message
An unexpected invitation or payment request? Take a moment to check before you act.
Pause before you click.
If a message seems suspicious, do not click its links, scan QR codes, open attachments, reply, make payments or share personal information.
02 / VERIFY
Start a fresh conversation
Use the contact routes below or a contact you already know. Do not use contact details supplied only in the suspicious message.
03 / REPORT
Help us protect others
Tell BBA what you received. Share a screenshot with sensitive details removed; keep the original email for any investigation.
OFFICIAL CONTACT ROUTES
Check directly with the BBA
Type britishblockchainassociation.org into your browser, or use a trusted bookmark. Start a new email or visit our official LinkedIn page independently.
info@britishblockchainassociation.org
Our official X account: @Brit_blockchain. Other BBA social channels are linked in this website’s footer.
Email addresses can be spoofed and social accounts can be compromised. For payments or significant commitments, confirm through a separate, previously established contact route. If one channel seems compromised, use another.
What should you verify?
Project and event invitations
Check the project name, organiser, purpose and requested action with BBA before agreeing to participate. You can also compare the details with our events and news pages. A missing listing is a reason to ask, not proof of fraud.
Payments and bank details
BBA has legitimate conference, membership and patronage fees. Confirm an unexpected invoice, payment request or change of bank details using a contact route you already trust. Do not rely on an email reply alone or a telephone number provided in that request.
Passwords and access
BBA will never ask you to disclose your password, one-time authentication code, recovery code or wallet seed phrase. Do not approve an unexpected login or grant remote access to someone claiming to represent us.
Certificates and attachments
The BBA and the APPG on Blockchain Technologies never ask people to download “certificates” or use access codes. If a request seems unusual, verify it with BBA before opening files or following instructions.
Report suspected impersonation
Contact BBA using the routes above. Include the sender’s displayed name and address, the subject, when it arrived and what it asks you to do. Do not send passwords, authentication codes, bank credentials or unnecessary personal information.
You can also forward suspicious emails to the UK National Cyber Security Centre at report@phishing.gov.uk. Read the NCSC’s reporting guidance →
Already clicked, paid or shared information?
Stop communicating with the sender. If money or payment details are involved, contact your bank immediately using its official app or a known number. If you disclosed a password, change it through the service’s official website and contact your IT team. Follow the NCSC’s next-step guidance.
Last updated: 7 October 2026 · This page provides verification guidance; it does not automatically authenticate individual messages.