An anti-phishing code is a unique code you create that is included in every official email you receive from Hata. This serves as your personal verification stamp, allowing you to instantly confirm that an email is genuinely from Hata and helping you spot fake or phishing emails attempting to impersonate us.
You can follow our step-by-step article guide:
1. Login to your Hata account and navigate to your Security settings.
You can access this by going to Account > Security from the side menu. Scroll down to Account security and find the Anti-phishing code row.
2. Click on the Anti-phishing code row to open the setup panel.
A side panel will open titled Set up anti-phishing code, with a brief description of what the code does.
3. Enter your unique code in the "Your code" field.
Your code must be a minimum of 4 characters and a maximum of 20 characters.
⚠️ Security tip: For your safety, do not use your login password, OTP, or any other sensitive credentials as your anti-phishing code. This code is for identification only and will appear in plain text in your emails.
4. Click Confirm and complete MFA verification.
To confirm changes to your account security settings, you will be prompted to verify with your registered MFA methods. This may include:
Passkey verification — verify using the passkey registered to your Hata account.
Authenticator (2FA) verification — enter the 6-digit code from your authenticator app.
Email verification — available as an alternative method.
5. You're done — your anti-phishing code is now active.
The Anti-phishing code row will now show as Enabled.
ℹ️ Please note: It may take up to an hour for your anti-phishing code to start appearing in your emails. During this short window, emails sent to you may not yet contain the code.
How to update or delete your anti-phishing code
You can change or remove your code at any time.
1. Go to Account > Security and click the Anti-phishing code row.
2. You will see your current code along with the date it was created.
3. To update your code, type a new code in the New code field and click Save. To remove the code entirely, click Delete code in the top-right of the panel.
4. Both actions require MFA verification to confirm.
How to use your anti-phishing code
Once enabled, your anti-phishing code will appear in official emails sent to you from Hata. Whenever you receive an email claiming to be from Hata:
Check that your anti-phishing code is present and matches the code you set up.
If the code is correct, the email is genuinely from Hata.
If the code is missing, incorrect, or different from what you set, the email may be a phishing attempt. Do not click any links, do not download attachments, and report it to our support team immediately.
If you ever forget your code, you can view it at any time in Account > Security > Anti-phishing code.
A few things to keep in mind
The anti-phishing code is included in official Hata communications. If you have just set or updated your code, allow up to an hour for the change to take effect across all email types.
Keep your code memorable to you but not easy for others to guess. Avoid common words tied to you publicly (your full name, birth year, etc.).
Never share your anti-phishing code with anyone, including Hata staff. Hata will never ask you to confirm your anti-phishing code over email, chat, or phone.
What the anti-phishing code looks like in an email
When Hata sends you an official email, your anti-phishing code will appear in a highlighted box near the bottom of the message, like this:
