You can receive an email or a text message from Payhawk with a verification code, a password reset request, or a registration confirmation that you didn't start. Payhawk sends these messages when a login, a password reset, or a registration is started with your email address or phone number.
To keep your details safe, consider the following information.
What to do when you receive a message you didn't request
To protect your account and your details:
Don't share the code with anyone. Payhawk never contacts you by phone to ask for your password or 2FA codes.
Don't open links from the unexpected message. Access Payhawk only by typing https://payhawk.com into your browser.
If you have a Payhawk account, change your password.
If you have a Payhawk account, review your trusted devices. In the Payhawk Web Portal, hover over your profile picture and select Manage profile > Security > Two-factor authentication. Delete any device you don't recognize.
Contact Payhawk Support at support@payhawk.com. Include which messages you received and when.
If you don't use Payhawk
If you don't have a Payhawk account, don't use the code to register or log in. Contact Payhawk Support at support@payhawk.com and include which messages you received and when, so the team can check the activity linked to your email address.
If you receive a login notification you didn't start
When your trusted device shows a Confirm login to Payhawk notification for a login you didn't start, tap Decline. Then change your password and contact Payhawk Support.
Useful resources