Protect authentication access
Use a unique password, keep email recovery access secure and do not share one-time codes, passkeys, recovery links or authenticated browser sessions.
Protect your ZILAL account, sessions, recovery access and public information from unauthorised use.
Use a unique password, keep email recovery access secure and do not share one-time codes, passkeys, recovery links or authenticated browser sessions.
If you see unexpected profile changes, listings, messages or sessions, secure your email first, change credentials where appropriate and contact ZILAL support with useful evidence.
Only publish contact and social information that you intend marketplace visitors to use. Do not place private identity documents, banking secrets or authentication information in public descriptions or media.
Check the domain before signing in and use the official social links published by ZILAL. Be cautious of lookalike websites, fake support profiles and requests to move account recovery into an unofficial channel.