diff --git a/README.md b/README.md
index 8901e0cb..6cfb122a 100644
--- a/README.md
+++ b/README.md
@@ -18,10 +18,18 @@ out the latest features or test their pull request. This build can be obtained
 from one of the workflow runs listed on [Github Actions](https://github.com/termux/termux-api/actions)
 page.
 
+> [!warning]
+> It should go without saying that **PR build artifacts are totally unofficial** until merged. For security and privacy, you shouldn't download them if you haven't read (and understood) the full PR diff (not the workflow-run diff).
+>
+> Official build artifacts come from `master` (without username)
+
 Signature keys of all offered builds are different. Before you switch the
 installation source, you will have to uninstall the Termux application and
 all currently installed plugins. Check https://github.com/termux/termux-app#Installation for more info.
 
+> [!warning]
+> Pull-Request builds are signed with the **same key** as the official builds. For more info, read the "Security warning" from [the app `README`](https://github.com/termux/termux-app/blob/master/README.md#github)
+
 ## License
 
 Released under the [GPLv3 license](http://www.gnu.org/licenses/gpl-3.0.en.html).