Try it: real or fake?
Real vs fake at a glance
| Real M2 | Warning sign |
|---|---|
| m2win001.com or m2win002.com in the address bar | Extra dashes, words or numbers: m2-win001, m2win01, m2win001-login |
| You typed or bookmarked the address | You tapped a link in a chat, comment or ad |
| Login asks for username and password only | A page asking for your OTP, IC photo or bank PIN to "verify" |
| Support through LiveChat on the official site | "Support" that messages you first on WhatsApp or Telegram |
| Deposits made inside your own account | Requests to transfer money to a personal account |
How to check a link in five seconds
- Tap the address bar so the full domain shows.
- Read it from the end backwards: it must finish in m2win001.com or m2win002.com.
- Look for swapped characters such as 0 for o, l for 1, or rn for m.
- If in doubt, close the tab and open M2 from your bookmark or Home Screen app.
Common tricks
- Look-alike domains that differ from the real one by a character or two.
- "New link" messages in groups that point to a copy of the site.
- Fake bonus pages that ask you to log in to "claim" a reward.
- Fake support that asks for your OTP to "unlock" your account.
If you entered your details on a fake site
- Open the official link yourself and reset your password with Forgot Username/Password.
- If you used the same password anywhere else, change it there too.
- Tell M2 support through LiveChat on the official site.
Best protection: add the official link to your Home Screen once with the M2 App guide, and always open M2 from that icon.