Release notes, maintenance and security alerts. UMRAYS posts only.
OFFICIAL
← Home
Security
Security and Official Accounts
Last updated: 30 September 2026
This page is the only valid list of UMRAYS official accounts. No account, channel, group or bot outside this list belongs to UMRAYS — even if it has UMRAYS in its name.
Our official accounts
Community chat. Everyone can post.
OFFICIALSetup, usage, account, payment and refund questions.
OFFICIALThe only official website.
OFFICIALUMRAYS has no Telegram account that sends private messages.
UMRAYS will never ask you for
- ✕Your Binance API key or secret key
- ✕Your Telegram bot token
- ✕Your password or verification code (SMS · 2FA)
- ✕A money transfer, “verify your account”, “make a payment”
- ✕Remote access or screen sharing (AnyDesk, TeamViewer, etc.)
Anyone asking for these five things is a scammer. There are no exceptions.
API
Keep withdrawals disabled on your API key
When you create the Binance API key for the bot, enable only reading and trading. UMRAYS never uses the withdrawal permission; with it off, no funds can be withdrawn with that key. Anyone asking you to enable it is a scammer.
About the notification bot
UMRAYS does not publish a notification bot. When you set up Telegram notifications in UMRAYS, you create the bot with your own Telegram account. That bot is yours; it is not connected to UMRAYS and sends us nothing. The token stays on your computer only. Any account presenting itself as the “UMRAYS notification bot” is fake.
About shared profiles
Setting profiles shared in the community are user content. UMRAYS does not approve, review or guarantee them. This is not investment advice. A loaded profile never starts the bot by itself; check every setting before you run it.
If you received a suspicious message
- Do not reply. Do not engage.
- Block the account and report it to Telegram.
- Compare the account name with this list character by character. Scammers change one letter.
- Tell us: security@umrays.com
If you already shared something: delete your Binance API key immediately, run /revoke in BotFather for your Telegram bot token, and change your passwords.