How to reach us.

If you have an account with us, the most secure way to communicate is through the messaging system within your account dashboard.

We respond to client inquiries within one business day, often sooner.

For urgent matters related to account access or suspected security issues, we provide priority handling through your secure dashboard.

For questions about opening an account or general information about Ficha:

Please note: we will never ask for sensitive information like passwords, recovery phrases, or private keys via email. Be cautious of any communication that does.

For media inquiries or partnership discussions:

We're selective about partnerships and media engagement. We respond to inquiries that align with our mission and values.

If you've discovered a potential security vulnerability, we want to hear from you. We follow responsible disclosure practices and ask that you:

• Report the issue to us before disclosing publicly
• Provide sufficient detail to reproduce and verify the issue
• Allow reasonable time for us to address the issue before any disclosure
• Avoid accessing, modifying, or deleting data that doesn't belong to you

We take security reports seriously and will respond promptly, typically within 48 hours. We offer bug bounty rewards for qualifying vulnerabilities. See our full disclosure policy for details.

Our security contact information is also available here (RFC 9116 security.txt).

To protect you and us:

• We will never contact you asking for passwords or private keys
• We don't make unsolicited phone calls about your account
• We won't pressure you to make urgent transfers
• We don't offer investment advice or recommend trades

If you receive any communication claiming to be from Ficha that violates these principles, do not respond and report it through your secure dashboard.