Security
Check before you act.
Lenders' names get borrowed. These are the fixed rules that separate a genuine estate message from an impersonation.
The estate never asks for
- A full banking password. Not in any format, for any reason.
- A one-time passcode. Codes authorise actions on your accounts; nobody genuine asks you to read one out or forward one.
- A move to a personal chat app. Account matters stay on official channels — a request to continue on WhatsApp or a personal number is a warning sign.
- An upfront fee to release money. No genuine facility requires a fee, deposit or "insurance payment" before funds are released.
- Payment to newly announced bank details. Treat changed-details messages as fraudulent until confirmed through a route you already hold.
Forward anything doubtful to [email protected] without clicking its links — include the sender address and the arrival time. If you acted on a message you now doubt, tell [email protected] as well so the account team can check for activity.
This site is a static directory. It sets no cookies of its own, hosts no sign-in forms and never asks for credentials. Its one job is publishing the group's real routes — the responsible-disclosure record is in /.well-known/security.txt.