You fool if that happens then also the first thing we ask is to send signed message from user address used to deposit the funds :-)
No further info will be provided considering security :-)
hint: you cannot sign from most webwallets. but that's probably too technical for you to understand