Check the channel
Use contact information obtained independently from the actual provider. Do not rely solely on a message that creates urgency.
Protect secrets
Keep passwords, recovery codes and one-time verification codes private.
Report clearly
Describe what happened without including sensitive account details in an editorial contact form.