● Covered by 1 source · 1 reportHigh impact
Fraudsters Target X Accounts with Fake Login Alerts
Key points
- Fraudulent emails mimic legitimate X login alerts.
- Links in emails can steal passwords or allow unauthorized access.
- Always verify email addresses and links before acting.
Overview of the Scam
Fraudsters are sending emails that appear to come from X, notifying users of logins from unfamiliar devices. These messages often provoke concern, as they claim logins are attempted from locations far from the user’s actual residence, such as Arizona for those living in London.
Legitimate vs. Fake Emails
The fake emails closely resemble authentic notifications sent by X, complete with correct grammar and the X logo. However, they typically lack personalization, such as the user's account handle, and contain vague information about the login location.
Risks of Clicking Links
Users are advised not to click any links in these fraudulent emails. Doing so can redirect them to counterfeit websites designed to capture sensitive information, including usernames and passwords.
Identifying Fake Notifications
ESET's cybersecurity adviser, Jake Moore, highlights key indicators of scams, such as the sender's email address. Genuine emails from X will only come from specified domains, and X never requests passwords via email.
Preventative Measures
Users should verify the legitimacy of security notices by independently logging into their X accounts or directly visiting the website. If an email is suspected to be fraudulent, it should be reported rather than acted upon.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Fraudulent emails impersonating X notify users of suspicious logins from unfamiliar devices. Clicking links in these emails can lead to credential theft, putting users' accounts at risk for scams.