Fake Login Email Targets X Account, Check Sender Before Clicking Link

Illustration photo: Pexels.

JAKARTA - Scammers use fake login warning emails to steal X accounts. The appearance is almost the same as the official message so it is difficult to distinguish at first glance.

Yahoo Tech quoted Thursday, July 23, saying the email could contain links that direct users to phishing sites. The site is designed to resemble the official page to steal login data.

Phishing is a scam that masquerades as an official message to take usernames and passwords.

The first sign is visible from the email content. Fake messages usually do not mention the name of the recipient's account. Meanwhile, the official notification from X lists this information.

The sender's address also needs to be checked. X states that it only sends emails from addresses ending in @X.com or @e.X.com.

"Some people may receive fake or suspicious emails that look like they were sent by X," the company said on its support page.

According to X, fake emails can contain malicious attachments or links to spam and phishing sites. The company also confirmed that it never sends attachments or asks for X passwords via email.

Therefore, messages that come from addresses other than @X.com or @e.X.com should be suspicious. Likewise, emails that include attachments or ask for passwords through the message.

Links in emails should not be opened directly. On a computer, users can hover over a link to see the destination address, which usually appears at the bottom of the browser.

If you are still worried about unauthorized entry attempts, do not check it through the link in the email. Open the X application directly on your phone. The official warning should also be visible in the application.

X also recommends users enable two-factor authentication. This feature requests additional verification after a password is entered so that the account has a second layer of protection.

Suspicious emails should not be replied to, the link should not be opened, and the attachment should not be downloaded. The message can then be deleted from the inbox.

If an account is suspected of having been hacked, users need to follow X's official recovery procedure and protect other accounts that may be at risk.