๐Ÿšจ Essential Safety Checklist

๐Ÿšซ MOD APK Warning - Critical Danger

Modified APK files are the #1 security threat to Heartopia players. These are unofficial, modified game files that claim to offer "unlimited money," "free crystals," or "no ads."

๐Ÿšจ CRITICAL RISK

Why MOD APKs Are Dangerous

  1. Malware & Viruses: Modified files often contain spyware, keyloggers, or ransomware that steal your personal data
  2. Account Theft: MODs can steal your login credentials and game progress
  3. Permanent Ban: XD Games detects modified files and issues instant permanent bans
  4. Payment Fraud: MODs can intercept payment information during purchases
  5. No Support: Official customer service won't help if you used modified files
  6. Legal Issues: Distributing MODs violates copyright law

Dangerous MOD APK Sites to Avoid

Known Scam Websites

NEVER download from these sites:

  • apkrabi.com - Claims "unlimited money," dismisses security warnings
  • modcombo.com - Distributes modified APKs
  • apkfami.net - Fake "official" downloads
  • hackmd.io MOD pages - Hosts modified files
  • Any site offering "free Moonlight Crystals" via APK downloads

โš ๏ธ If a site tells you to "disable Play Protect" or "allow unknown sources," it's a scam!

โš”๏ธ Cheat Tools & Hacks - Instant Ban

๐Ÿšจ CRITICAL RISK - INSTANT BAN

What Are Cheat Tools?

Programs that modify game behavior:

  • Speed hacks (move faster)
  • Item duplication exploits
  • Unlimited gold/crystals generators
  • Auto-fishing/farming bots
  • Inventory editors

Why You'll Get Banned

Ban Consequences

  • Permanent account loss - All progress deleted forever
  • No refunds - Purchased Moonlight Crystals are lost
  • IP ban possible - Can't create new accounts on same device
  • Steam/Google Play ban - Affects other games on your account

โœ… Safe Download Sources - Official Only

Always download Heartopia from these verified official channels:

Official Download Links

โœ… Current Version: 0.4.5 (January 2026)

How to Verify Official Downloads

  1. Check the publisher name: Should be "XD Global" or "XD Games"
  2. Verify the package ID: com.xd.xdtglobal.gp (Android)
  3. Look for verified badge: โœ“ on app store pages
  4. Check download count: Official app has millions of downloads
  5. Read recent reviews: Real users mention current game version

See our Complete Download Guide for detailed instructions.

๐Ÿ” Account Security Best Practices

Protect Your Account

Essential Security Steps

  1. Bind to Google/Apple/Steam: Go to Settings โ†’ Account โ†’ Link Account
  2. Use a strong password: 12+ characters, mix of letters/numbers/symbols
  3. Enable 2FA (if available): Extra layer of protection
  4. Never share credentials: Not even with friends or "support" claims
  5. Regular password changes: Update every 3-6 months

Common Scams to Avoid

Phishing & Account Theft Scams

  • Fake "official" emails: XD Games never asks for passwords via email
  • "Free crystals" websites: Require login โ†’ steal your credentials
  • Discord DM scams: Fake moderators asking for account info
  • "Account recovery" services: Steal your account instead
  • Suspicious links: Don't click links from untrusted sources

How to Recognize Official Communication

๐Ÿ›ก๏ธ Data Privacy & Permissions

What Data Heartopia Collects

Official Heartopia app collects minimal data:

Permissions You Should Grant

Normal Permissions (Safe)

  • Internet access: Required for online features
  • Storage: Save game data locally
  • Network state: Check connection quality

Suspicious Permissions (Red Flags)

Official Heartopia NEVER requests these:

  • โŒ Access to contacts
  • โŒ Access to call logs
  • โŒ SMS reading/sending
  • โŒ Camera (unless for screenshot feature)
  • โŒ Microphone (no voice chat in Heartopia)

If an APK requests these, it's malware!

๐Ÿšจ What to Do If Your Account Is Compromised

Immediate Actions

  1. Change password immediately: Use a new, strong password
  2. Unlink suspicious devices: Settings โ†’ Account โ†’ Devices โ†’ Remove unknown devices
  3. Contact support: In-game Customer Service or official Discord
  4. Check linked accounts: Ensure Google/Apple/Steam links are correct
  5. Run antivirus scan: If you used MOD APKs, scan your device

Report Scams & Malware

โ“ Frequently Asked Questions

Is it safe to use VPN with Heartopia?

Generally yes, but avoid VPNs if:

Can I get banned for playing on multiple devices?

No. Playing on phone + tablet + PC is perfectly fine as long as you're using the official app on each device.

Are third-party tools like Steam Achievement Managers safe?

No. Any tool that modifies game files or server communication can trigger anti-cheat. Stick to official methods only.

What happens if I accidentally download a MOD APK?

Uninstall immediately:

  1. Uninstall the MOD APK
  2. Run a full antivirus scan
  3. Change your passwords (game, email, payment accounts)
  4. Download official version from app store
  5. If you logged in with the MOD, contact support immediately

Can I trust "Heartopia generators" that promise free crystals?

Absolutely not. These are 100% scams. They either:

Get free crystals the legitimate way: Moonlight Crystal Guide

๐Ÿ“š Related Security Guides