Emails from Centurion Labs#

Treat every email claiming to come from Centurion Labs as unverified until you confirm the sender and destination through a current official Centurion source. Display names, logos, signatures, and copied conversation history are easy to forge.

What to verify#

Check more than the visible sender name:

The complete sending domain and reply-to address.
Whether the domain is linked from the current official Centurion site.
The destination of every link before opening it.
Whether the message matches an action you initiated.
Email authentication and header information when your mail provider exposes it.
Spelling substitutions, extra subdomains, or unusual URL shorteners.

A message can pass some email-authentication checks and still be malicious if an account or legitimate service was compromised. Independent context remains important.

Requests Centurion Labs will not make by email#

No legitimate message should require you to send:

A recovery phrase or private key.
A wallet password, one-time code, or hardware-wallet code.
Remote access to your computer or phone.
A token approval or NFT operator permission to verify identity.
Assets to a “safe” address selected by the sender.
A payment to release a refund, job offer, reward, or transaction.

A support representative also cannot reverse a confirmed blockchain transaction or bypass token-contract restrictions.

Step-by-step before acting#

Do not reply, click, download, or sign from the email.
Open a trusted bookmark or independently locate the current official Centurion site.
Use its published channels to confirm whether the communication is expected.
Navigate to CenturionDEX directly rather than through the email link.
If a wallet request appears, verify network, contract, spender, recipient, and outcome.
Delete or report the email if any detail cannot be confirmed.

Attachments deserve particular caution. Documents, archives, wallet installers, and coding assignments can contain credential-stealing software even when they appear relevant.

If you interacted with the email#

Change affected passwords from a clean device, review wallet approvals and smart-account permissions, and move assets to a new wallet if secrets were exposed. Preserve the full email, headers, URLs, attachment names, and transaction hashes for reporting.

Do not trust a follow-up sender who promises recovery. Attackers often contact victims again using the details already collected.

Stay safe#

Never share a recovery phrase, private key, password, or one-time code by email. Verify every unusual request through a separate official channel that you located yourself.