Referral registration and application safety
Why registration comes first
The referral relationship is checked at account creation. A software download is a separate step and should not be treated as proof that the code was applied.
What to verify after registration
Sign in only through a domain you independently confirm, review the publisher shown by the application store, and reject any request for a seed phrase, private key, remote-control session or screen-sharing access.
Update path
Use the same recognized source for future updates. Unexpected requests to install a replacement application should be treated as a security event and verified through the exchange's published support channel.