Account security

We’re always working to keep your account secure​,​ but here’s how you can help protect your information:

• Start with a solid password: Your Crion password should be unique​,​ preferably completely different from any other account (such as your email​,​ social media​,​ or your bank). So​,​ if one account is compromised​,​ it's less likely to impact others.
• Review your account: Check your account if you think someone has logged in to Crion without your permission.
• Flag suspicious stuff: If you think something is off about a Crion listing​,​ profile or message thread​,​ flag it for review.
• Check for the “https”: If it’s included at the start of a URL​,​ your connection is encrypted​,​ which protects the integrity and confidentiality of your data. Some browsers may also show a lock icon next to the URL so you know it’s secure. Type https://www.crion.org directly into your browser to get started. Or​,​ if you click a link in an email​,​ check the destination URL before you log in.
• Stay up to date: Check for software updates that protect you from security risks.
• Install a trusted antivirus: Get help detecting​,​ preventing​,​ and removing common viruses​,​ and other types of cyber attacks.
• Check the sender: Don't click links or download attachments from an email unless you know who sent it.
• Always go through us: Keep all payments and communication on the Crion platform. Don't transfer funds outside Crion or share your email address before a booking is accepted. If someone emails you asking you to pay or accept payment offsite​,​ contact Crion right away. Learn how to spot if an email is really from Crion.

It could happen that users create fake emails or websites designed to look like Crion. These sites can be used to try to steal personal information​,​ like your password or bank account info. This is called phishing or spoofing.

If you receive an email or are directed to a website that looks like Crion but asks for confidential information​,​ be cautious. When in doubt​,​ always start at the Crion home page. Type https://www.crion.org into your browser and go from there.

Fraudulent emails often include the Crion logo and a fake Crion address in the "From" line. Fraudulent emails might also contain text taken from real Crion emails​,​ such as a reservation confirmation message​,​ payout confirmation​,​ reservation reminder​,​ or a request to update your profile. By making an email seem real​,​ fraudsters hope to trick you into providing personal information that we would never ask for. Here are some signs to help you tell the difference:

• Check for legitimate links: fraudulent emails can contain links to fake Crion web pages that try to steal your information. Don’t click links in any email you’re not sure about. A real link to Crion will begin with https://www.crion.org. If you click a link that takes you to a page that looks like Crion but doesn’t start with this address​,​ it’s a fraudulent page and you should close it.
• Check for official Crion domain: fraudulent emails often come from domains that may appear similar​,​ such as @crion.com or @reservation-crion.org. But legitimate emails from Crion will only come from the following domains: @crion.org. If it's not sent from this address​,​ it’s not from Crion.
• Check the website address: pay special attention to misspellings of Crion’s name. If Crion is misspelled in the website address​,​ the website is fake.
• Check for a lock icon in your browser: you can tell if a website is secure by looking for a lock icon in your browser’s address bar. Crion website will show this icon. If this icon isn't in the address bar​,​ your connection to the website isn’t secure​,​ and you shouldn’t enter any personal information.
• Be wary of threatening tones: fraudulent emails and websites often have an urgent tone and threaten account suspension​,​ loss of a reservation or booking​,​ or a delayed payout if you don't click a link or provide certain information immediately. If it’s truly important​,​ you’ll usually find more information in your Crion dashboard. If you have any doubt about an email’s authenticity​,​ log in to your account and go from there.
• Report fake websites to Crion: If you believe you've encountered a web page designed to look like Crion, let us know by reporting the website’s URL. If you interacted with a fraudulent site or are concerned about the security of your account, Contact us.