How to Secure Your Seller Accounts
For a small online seller, a few accounts hold the whole business: the email you sign in with, the WhatsApp number buyers message, the Instagram page with your followers, the mobile wallet or bank account that receives money, and your online store. If someone takes over one of them, they can message your customers, change your payout details or lock you out of years of work. Most account takeovers are not clever hacking — they come from reused passwords, shared codes and fake login pages. This guide covers the simple steps that protect each account, and what to do if something goes wrong.
1. Know which accounts matter most
Protect your email and phone number first — they are the keys that unlock everything else.
| Account | Why it matters |
|---|---|
| Used to reset passwords for almost everything else | |
| Phone number and SIM | Receives the codes that verify your accounts |
| Where buyers contact you; a takeover lets someone message them as you | |
| Instagram and Facebook | Your followers, posts and reputation |
| Bank and mobile wallet | Your money |
| Your online store | Listings, orders, buyer details and payouts |
2. Use strong, different passwords
Reusing one password everywhere is the biggest risk. If it leaks from one website, criminals try it on your email, social media and store.
- Use a different password for every important account.
- Make passwords long — a phrase of several unrelated words is strong and easier to remember.
- Avoid obvious choices — your name, shop name, phone number or date of birth.
- Consider a password manager to create and store passwords safely.
- Never share your password with anyone, including someone claiming to be support.
3. Turn on two-step verification
Two-step verification means a stolen password is not enough on its own. Turn it on for every account that offers it.
- Email — turn on two-step verification in your account security settings.
- WhatsApp — set a two-step verification PIN in Settings, under Account.
- Instagram and Facebook — turn on two-factor authentication in the security settings.
- Bank and wallet apps — use a strong PIN and any extra security the app offers.
🔑 The key point
Two-step verification only works if you never share the codes. A code sent to you is for you alone.
4. Recognise fake login pages
Phishing messages copy the look of real companies and send you to a fake page to collect your password. They often claim your account will be closed, your payout is waiting, or you have broken a rule.
- Do not sign in through links in unexpected messages or emails.
- Type the website address yourself — for your store, go to dapxop.com directly.
- Check the address bar before entering a password; look-alike addresses are common.
- Be suspicious of urgency — "within 24 hours or your account is deleted".
⚠️ Careful here
Never enter a password or verification code on a page you reached from a link in a message, however official it looks.
5. Protect your phone and SIM
Your phone receives the codes that protect everything else, so treat it as part of your security.
- Use a screen lock — a PIN, pattern or fingerprint.
- Keep your phone and apps updated.
- Install apps only from official app stores.
- Act quickly if your SIM suddenly stops working — contact your mobile network, because it can be a sign someone is trying to take over your number.
6. Share access safely
Family members and helpers often manage parts of a small business. Sharing your own password with them makes it hard to know who did what, and easy for a password to spread.
- Give helpers only what they need — someone packing parcels does not need your wallet PIN.
- Use separate logins where a platform allows it.
- Change passwords when someone stops helping.
- Sign out on shared devices and never save passwords on a computer others use.
7. Keep your payout details safe
A criminal who gets into a store account may try to change payout details so your earnings go to them. Check your payout details occasionally, and treat any unexpected change or notification seriously.
If you ever notice payout details you did not set, secure your account immediately and contact the platform's support through its official website.
8. Watch for signs of a takeover
Codes you did not request usually mean someone knows your email or number and is trying to get in. Do not share them, and change your password.
- Login alerts or codes you did not request.
- Password reset emails you did not ask for.
- Customers mentioning messages you did not send.
- Posts, listings or settings you did not change.
- Being suddenly signed out of an account.
9. If an account is taken over
Move quickly, starting with the most important accounts.
- Secure your email first — change the password and sign out of other devices.
- Recover the affected account through the platform's official account recovery process.
- Turn on two-step verification once you are back in.
- Contact your bank or wallet on its official helpline if money may be at risk.
- Warn your customers through your other channels not to trust messages from the compromised account.
- Report fraud to the National Cyber Crime Investigation Agency through its online complaint portal.
💡 Worth knowing
Scam calls that ask for codes are covered in Fake Courier & Bank Calls: Staying Safe as a Seller.
10. Your account security checklist
Set aside half an hour to do this once.
- Use different, long passwords for email, social media, wallet and store.
- Turn on two-step verification everywhere it is offered.
- Set a WhatsApp two-step verification PIN.
- Lock your phone and keep apps updated.
- Give helpers only the access they need.
- Type dapxop.com yourself instead of following links.
Most accounts are not hacked. They are handed over through a reused password or a shared code.
More seller safety guides
This guide is part of Protecting Your Online Business From Scams, the complete seller safety guide.
Run your business from a store you control. Opening one on dapxop is free.
Open your free store →Explore on dapxop
Frequently asked
How do I protect my WhatsApp business number?
Set a two-step verification PIN in WhatsApp's account settings, never share the six-digit verification code sent to your phone, and lock your phone.
Which account should I secure first?
Your email and phone number, because they are used to reset passwords and receive codes for almost every other account.
What is two-step verification?
An extra check, such as a code or PIN, needed in addition to your password. It means a stolen password alone is not enough to access your account.
How do I avoid fake login pages?
Do not sign in through links in unexpected messages. Type the website address yourself, check the address bar and be suspicious of urgent warnings.
Should I share my store password with a helper?
Avoid it. Give helpers only the access they need, use separate logins where possible and change passwords when someone stops helping.
What should I do if my Instagram or WhatsApp is hacked?
Secure your email first, recover the account through the official recovery process, turn on two-step verification, warn customers through other channels and report fraud to the NCCIA.