Password reset scams are nothing new – cybercriminals send out this type of scam in mass, and numbers are on their side. The sheer quantity of these email scams that bad actors can send out means they are almost guaranteed to have at lease one success. In this post, we’ll discus this type of scam, and give you the tips you need to identify and action them.
What is a Password Reset Scam?
Password reset scams are a form of phishing attack where malicious actors impersonate legitimate companies or services to trick users into revealing their login credentials. They are often in the form of an email, and vary in how legitimate they may look. The scam typically unfolds as follows:
- The victim receives an unsolicited email, text message, or phone call.
- The message claims or presents itself as being from a trusted entity (e.g., a bank, social media platform, email provider, service).
- It informs the victim that they need to reset their password. Sometimes a reason is provided, such as “suspicious activity” or “due to it expiring”. If the scam is via voice call, the scammer may ask for “confirmation” of the victims current login details.
- If in written form, the message will include a link to reset the password. This will direct the victim to a fake website that mimics how the legitimate website looks.
- When the victim enters their current credentials into the fake website, the scammer captures this information.
What to Look Out for
- Often these types of scams can look quite crude when in email form. The formatting may look odd, or the images and logos may appear pixelated and low quality.
- There may be poor grammar, spelling mistakes, or confusing wording.
But sometimes, these email scams will look incredibly legitimate, so keep the below in mind:
How to Protect Yourself
- Services will never ask you to provide your account login details over the phone.
- Most services will not email you requesting that you change your password.
- If you receive an email or message asking you to reset your password, delete it. As a precaution, you can then go direct to the services website and update your details there.
- Utilise multi factor authentication, see our blog post here
