Fraudsters are targeting X account users with fake login alerts, aiming to steal credentials and launch crypto scams. If you receive an email saying "We noticed a login from a new device," do not click any links. This phishing attempt mimics legitimate X notifications but comes from a spoofed address. Protect your account by verifying the sender and never sharing your password.
How the X Account Scam Works
The scam email claims a login occurred from an unfamiliar location, like Arizona, while you live in London. It urges you to click a link to reset your password or review app access. These links lead to fake pages that capture your X account credentials. Once compromised, hackers use your account for crypto scams, phishing attacks, and misinformation campaigns.
Get the #1 Wireless Door Camera
REOLINK Bestseller: 2K Weatherproof Video Doorbell, No Monthly Fees.
Key Signs of a Fake Login Email
- The email lacks your X account handle
- Location details are vague or incorrect
- The sender address is not @X.com or @e.X.com
- Links lead to suspicious URLs, not X.com
Comparison: Real vs. Fake X Email
| Feature | Real X Email | Fake Scam Email |
|---|---|---|
| Sender Address | @X.com or @e.X.com | Random domain like @x-security.com |
| Account Handle | Includes your @username | Missing or generic greeting |
| Login Location | Accurate city/region | Vague or mismatched location |
| Links | Direct to X.com | Obfuscated or fake URLs |
Protect Your X Account from Crypto Scams
Enable two-factor authentication (2FA) on your X account to add an extra layer of security. Never click links in unsolicited emails; instead, log in directly at X.com. Review connected apps regularly and revoke any you don't recognize. Cybersecurity expert Jake Moore advises: "Always check the sender email and hover over links before clicking."
What to Do If You Clicked the Link
If you fell for the scam, change your X account password immediately from a trusted device. Revoke access for any suspicious apps and enable 2FA. Monitor your account for unauthorized posts, especially those promoting crypto scams. Report the incident to X support and consider notifying your bank if financial info was exposed.
FAQ
How can I spot a fake X login email?
Check the sender address—it must be @X.com or @e.X.com. Real emails include your exact account handle and accurate login location. Hover over links to see the true URL.
What should I do if I receive a suspicious email?
Do not click any links. Forward the email to X's phishing report address, then delete it. Log into your account directly to check for any unauthorized activity.
Can scammers use my X account for crypto scams?
Yes. Once they gain access, fraudsters often post fake crypto giveaways or phishing links to your followers. This can damage your reputation and lead to financial losses.