CoinZoom staff will never ask you for your password, 2-factor authentication codes, or request remote access to your computer. If you are being asked to provide any of this, you can be sure the email did not originate from CoinZoom.
Emails from CoinZoom will always have the CoinZoom.com domain name at the end of them. For example, emails from firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, and any other email from the @coinzoom.com domain can be trusted.
Regardless of sub-domain, we cryptographically sign all of our emails using DKIM and protect our domain against unsigned email with DMARC.