Hi, I believe I’ve gotten scammed from someone as described here from a phone call:
which you can google for the reddit post with the title “Call from “Google” saying that they received a request to change the primary number on my account”
However, it looks like the link in there is not legitimate. However, I’m trying to figure out a bad actor can send an email from seemingly a legit domain like trezor dot io? I scammer also got various emails sent from google dot com like from legal at google dot com. Please educate me because this is terrifying!
1 Like
Okay, I found out it is email spoofing. If unsure, click on the original message and see if there is a “PASS” like in the SPF, DKIM, and DMARC sections.
Normally, e-mail spoofing won’t help anyone send from trezor.io domain.
What is happening here is that
the attackers have access to your e-mail password
and with that, they can inject e-mails directly into your inbox without having to send through the normal process.
They’ll just log in and say “here, place this e-mail into the inbox, oh and mark it as unread”.
If you’re using Gmail, go through the Security Checkup process immediately. Change your password and disable any unrecognized logins and application keys.
(if you’re using a different mail provider, definitely change your passwords and figure out if something like Security Checkup exists there.)
1 Like