The safest way to contact support is to start from the official website. Open the Contact page and use one of the routes shown there. This prevents outdated or impersonated contact details from entering the conversation.
Explain the issue without including passwords, one-time codes or unnecessary sensitive details. A legitimate support process should allow your request to be assessed without asking for secret credentials.
If you encounter a suspicious account or domain, include the exact address in your report. This helps the security team review the concern accurately.