Security & Fraud Reporting Policy

What to Report

Please report suspected vulnerabilities, unauthorized account access, suspicious logins, phishing, payment fraud, exposed information, malicious software, scams, impersonation, or other security concerns involving Mevlora.com.

If your account may be compromised, change your Mevlora password and any reused password immediately. Contact your bank or payment provider about suspicious transactions. Email Mevlora with the subject ACCOUNT COMPROMISED.

How to Report

Email contact@Mevlora.com with a concise description, the affected page or service, reproduction steps when relevant, the date and time you noticed the issue, screenshots or recordings when safe, and a way to contact you.

Do not include a password, authentication code, complete payment-card number, or other secret. For an account or order issue, include only the information reasonably necessary for verification.

Safe Testing

Limit testing to what is reasonably necessary to confirm and describe the concern. Do not access, change, delete, download, or retain another person's data. Do not conduct denial-of-service testing, brute-force attacks, phishing, social engineering, malicious software deployment, or automated scanning that creates material load. Do not use a vulnerability for fraud, extortion, personal gain, or unauthorized access.

Please provide Mevlora a reasonable opportunity to investigate before public disclosure. This request does not restrict a disclosure required by law or a legally protected communication with an attorney, regulator, or law-enforcement agency.

Good-Faith Reports

Mevlora will not pursue legal action solely because a person makes a good-faith security report while following this policy, avoiding harm, stopping after confirmation, and promptly reporting the issue. This statement does not authorize access to data or systems beyond what is lawful and does not apply to fraud, extortion, privacy violations, service disruption, or other harmful conduct.

Fraud and Phishing Warning

Mevlora will not ask for your password, authentication code, or complete payment-card number by email, phone, or text. Treat unexpected payment demands, unfamiliar verification links, or threats of immediate account closure as suspicious. Visit Mevlora.com directly or contact us using the information below.