Fake Server Message Tries to Steal Email Account Login

According to this supposed server message, you are required to add a recovery number to keep your email account safe.

The “Security Alert” email warns that your account will be deactivated if you do not click a button and add your recovery number.

However, the email is not from your email service provider. Instead, it is a phishing scam that attempts to trick you into giving criminals access to your email account.

If you click the button in the email, you will be taken to a fraudulent website that asks you to sign in with your email address and password. It may then ask you to provide other information such as your phone number and home address details. At the end of the process, you’ll be told that you have successfully secured your account.

But, meanwhile, online criminals can collect the information you supplied and use it to hijack your email account.

Once they have gained access to your account, they can use it to launch spam, scam, and malware campaigns in your name. They will also be able to access other services such as online storage and app stores that may be linked to the account.

The criminals may harvest more personal information from the linked services and add it to the information they collected during the scam. They may subsequently use this information to attempt to steal your identity.

Legitimate email service providers may sometimes send you security alert messages if they detect a login from a new device or suspect unauthorised access attempts.

And, they may prompt you to add a recovery number to help secure your account.

However, genuine emails will always include the name and logo of the service provider. They will not be generic, unbranded messages like the one below.

And, genuine emails will not threaten that your account will be deactivated if you do not immediately click a link and provide information.

It is always safest to login to your email accounts by entering the address into your browser’s address bar or via a trusted app rather than by clicking a link in an email.