Account-alert scams try to trigger a fast reaction:
• “Password reset requested” when you didn’t request it
• “Suspicious login” or “Account locked” warnings
• “Verify your identity” links that steal logins and OTP codes
Some alerts are real. Scams copy the look and push you into a bad click.
“Reset your password now” with a link. The link goes to a fake login page designed to steal your password.
They claim someone logged in and you must “verify” urgently. Often includes a shortlink or strange domain.
They ask for a verification code (“I sent you a code by mistake” or “confirm this login”). That code can give them access.
Same rule every time: don’t use the message link.
These are strong scam signals.
These steps help you secure your account quickly.
Ignore the link. Open the real app/site yourself and check security activity. If anything looks wrong, change password from inside the account.
Use a unique password and enable 2FA. Review recovery email/phone settings and remove anything you don’t recognise.
Change passwords immediately, sign out of all devices, and contact support if needed. If banking was involved, contact your bank straight away.
If you clicked a link, paid money, or shared details — these pages walk you through what to do next.
Quick answers to common questions.
Still don’t click the email link. Open the official app/site and change your password from inside settings. Then review recent logins/devices.
Any hard indicator: a link/shortlink, a phone/WhatsApp handle, a payment request, a login/OTP request, install/download/remote-access prompts, or crypto wallet/transfer instructions.
It’s a common takeover trick. Don’t share it. If you did share a code, change your password immediately and sign out of all devices.
Paste it into KiwiScan and verify the link before you log in.
SCAN NOW