Forum Discussion
Phishing Attempt?
I received a text message from +1(657)215-1526 as following:
"1Password: Your recovery code is xxxxxxxx (7 digit number). If you did not request this please respond with N immediately".
I replied with N and few minutes later received a phone call from +1(888)710-9976. Person was telling me that somebody from India trying to hack my account and they would recommend to logout from all instances. They asked how often ago I was used 1Password - which I replied that I'm using it all the time. They said that they will send me email with code that I would need to do something.
That email got to Junk mail, and it contained something resembling 1Password QR code.
I hang up on them realize that it's very likely to be a phishing attack, but wanted to validate this with 1Password team.
Hi Svidersky,
Thanks for reporting this! 1Password will never text you, and will definitely never text you your recovery code, so your instincts are right that this is almost certainly a phishing attempt.
If you still have the text message and can email a screenshot or the text of it to abuse@1password.com, we will investigate if there are any actions we can take.
Thanks again for posting this and staying vigilant!