If sending us information could put you or someone else in danger, use one of these instead of email.
Signal — @. Use a device that isn’t tied to your name where possible. Set disappearing messages.
Encrypted email — security@samiei.co.uk, encrypted with our PGP key. [Key fingerprint. Link to the key file.]
[Optional: SecureDrop or OnionShare instructions if you set one up. Don’t advertise a channel you can’t monitor reliably.]
Before you contact us
- Use a device and a network that aren’t associated with your workplace or your name.
- Don’t tell us your identity unless we need it. If we do need it, we’ll say why.
- Don’t send documents from a work account or a work device. Document access is logged, and the log is how people get caught.
- Delete the conversation from your device after we confirm we have the material.
What we promise
We don’t publish anything that identifies a source without their explicit agreement. We don’t hold identifying material on sources in Iran. We don’t hand over material to any government or third party. If we’re legally compelled to, we will say so publicly to the extent the law allows.
We can’t promise we’ll use what you send, or that we can reply.