All rules
THE COMMUNITY STANDARD Privacy, Security & Scams
RULE 5.3

Malware, Phishing & Account Theft

Do not distribute malware, token grabbers, credential harvesters, malicious scripts, destructive files, deceptive QR codes, fake login pages, or instructions intended to compromise accounts or devices.

Browse rulebook
RULE 5.3READING / 4 PARAGRAPHS

Malware, Phishing & Account Theft

Do not distribute malware, token grabbers, credential harvesters, malicious scripts, destructive files, deceptive QR codes, fake login pages, or instructions intended to compromise accounts or devices.

Do not request passwords, authentication codes, session tokens, recovery codes, payment credentials, or remote access. Legitimate staff will not ask for these secrets.

Suspicious files and links may be removed without opening them. Deliberate distribution or testing against members is grounds for immediate removal and platform reporting.

Code snippets and security tools must include enough context to show a legitimate purpose. Obfuscation, persistence, credential access, or stealth features may justify removal pending review.