Account and data security

Two-step sign-in

Two-step sign-in is the most important protection for your account. Even if your password leaks, nobody can sign in without the second step.

1. Open Security.
2. Scan the code with an authenticator app (such as Google Authenticator or Microsoft Authenticator), or register a hardware security key or your device's fingerprint.
3. Keep your recovery codes somewhere safe and offline. If you lose your phone, these codes are the only way back in.

The anti-phishing code

Choose a phrase of your own. It appears in every email, SMS and bot message PAMM Iran sends you. A message without your code is not from PAMM Iran — do not click its links.

Devices and sessions

The devices section lists every browser you have signed in with. Remove any device you do not recognise and all its sessions close. A sign-in from a new device is reported to all your confirmed channels; if it was not you, change your password at once.

Signs of fraud

• Someone using the PAMM Iran name promises a fixed or guaranteed return.
• You are asked to send money to a personal card or account.
• Someone asks for your verification code, password or ID images in a messenger.
• The website address differs slightly from pamm.ir.

Giving a manager access to your account

For current dedicated-management paths, use DAMM or SAMM and follow that service’s terms. Do not give a manager your broker master password, broker-portal access or sign-in codes. New listings for the former password-handover method are not accepted; historical records are retained. See the old method and current alternatives.