X Account Scam Warning: How to Spot the Fake Login Email
Fraudsters are targeting X (formerly Twitter) users with a convincing phishing scam that could leave your accounts and money at serious risk. Here’s what you need to know to protect yourself.
The scam works like this: you receive an email that appears to come from X, warning you of a login attempt from a new device in an unfamiliar location. The message asks “Was this you?” and typically includes a link to “verify” your account. It seems legitimate — after all, X does send genuine security alerts. But this is a fake.
When you click the link and enter your password, criminals capture it. They then use your X account to launch further scams, including cryptocurrency fraud and phishing attacks targeting your followers. If your account has any financial information linked to it, or if you use the same password elsewhere, the damage can spread quickly.
Why X accounts are attractive targets? They’re visible and trusted. Scammers can impersonate you to convince your followers to send money or click malicious links. They may also use your account to pose as a business or celebrity, making the fraud seem even more credible.
How to stay safe:
Don’t click links in unexpected security emails from X. Instead, log into your account directly through the official app or website and check your login history yourself. If you spot suspicious activity, change your password immediately — make it long, unique, and include numbers and symbols.
Use two-factor authentication on your X account. This adds an extra security layer: even if someone has your password, they can’t access your account without a second form of verification, usually a code sent to your phone.
If you’ve already clicked a suspicious link or entered your password, change it right now. Check your other accounts too, especially email and banking, in case you’ve reused that password.
For more scam alerts and cybersecurity advice, visit the National Cyber Security Centre (NCSC) website at ncsc.gov.uk, or report fraud to Action Fraud at actionfraud.police.uk. Stay vigilant — if something feels off, it probably is.