Contact with Signal (support.signal.org/hc/en-us/art...) or any Signal representative will ONLY come from an @signal.org email address, not from within the app. And again, we will never ask for your PIN or verification code. And we do not reach out proactively, only in response to your requests.4/

Finally, to help you determine the fake and malicious from the genuine, we have signposts (support.signal.org/hc/en-us/art...) in the application that can aid you in identifying fakers and phishing attempts. We also have tools like Registration Lock to help protect against account takeovers. 6/