Phishing Attempt?

Question

I received a text message from +1(657)215-1526 as following:

"1Password: Your recovery code is xxxxxxxx (7 digit number). If you did not request this please respond with N immediately".

I replied with N and few minutes later received a phone call from +1(888)710-9976. Person was telling me that somebody from India trying to hack my account and they would recommend to logout from all instances. They asked how often ago I was used 1Password - which I replied that I'm using it all the time. They said that they will send me email with code that I would need to do something.

That email got to Junk mail, and it contained something resembling 1Password QR code.

I hang up on them realize that it's very likely to be a phishing attack, but wanted to validate this with 1Password team.

1P_SimonH · Accepted Answer

Hi @Svidersky,Thanks for reporting this! 1Password will never text you, and will definitely never text you your recovery code, so your instincts are right that this is almost certainly a phishing attempt.If you still have the text message and can email a screenshot or the text of it to abuse@1password.com, we will investigate if there are any actions we can take.Thanks again for posting this and staying vigilant!

Dunecat · Answer

Definitely a scam.

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded