Protecting Against Unauthorized Login
security
unauthorized login
phishing
Who this article is for
For all users, and especially for anyone with a role that handles important information, such as a store, business account, or developer.
For all users, and especially for anyone with a role that handles important information, such as a store, business account, or developer.
Four things you must do
- A strong, unique password (14+ characters, above the requirements, not reused on other services)
- Enable MFA (TOTP or passkey recommended)
- Check your login history regularly (about once a month is a good target)
- Never click links in suspicious emails
How to spot phishing scams
| Suspicious sign | Explanation |
|---|---|
| Sender differs from the official one | The official sender is noreply@receiptroller.com. e.g. ...@receipt-roller.co is not legitimate |
| The URL is a fake site | The official domain is receiptroller.io. Be wary of .com or look-alike domains |
| Creates a sense of urgency | Things like "verify now or your account will be suspended" |
| Unnatural wording | Text that reads like a machine translation |
| Asks you to enter your password | ReceiptRoller never sends an email asking you to "enter your password" |
Care on shared PCs and public Wi-Fi
- Leave "Keep me signed in" unchecked
- Clear the browser cache and cookies when you're done
- Always log out before leaving your seat
- Use a VPN on public Wi-Fi
The risk of reusing passwords
Password stuffing attacks that use lists of passwords leaked from other services are on the rise. Always use a different password from any service other than ReceiptRoller.
If you notice an unauthorized login
- Change your password immediately
- "End all sessions"
- Enable MFA (right away, if it isn't set up)
- Note the IP and date/time of the suspicious access and report it to support
- Share "possible unauthorized access" with members of the stores and business accounts you're linked to
- If there's financial damage (fraudulent payments or plan changes), request that transactions be halted
Related guides
Published: 2026-04-27
Updated: 2026-07-05
Related articles
-
Change Your PasswordExplains how a logged-in user changes their password, what happens afterward (how existing sessions are handled), and when a periodic change is worthwhile.
-
Password RequirementsExplains the minimum requirements for a ReceiptRoller password, the recommended strength, examples to avoid, and using a password manager.
-
Setting Up Multi-Factor Authentication (MFA)Explains how to enable multi-factor authentication (MFA) in ReceiptRoller, the supported apps, storing your recovery codes, and what to do if you lose your MFA device.
-
Checking Your Login HistoryExplains how to read your ReceiptRoller login history, how to tell whether access is suspicious, and how to force sessions to end.