It preys on our natural urge to keep communication flowing, making you believe your outgoing emails have failed to send because of an expired password or outdated account information.
While it may look like a legitimate notice from your email provider, this scam is designed with one purpose: to steal your email credentials. Here’s how it works and what you can do to protect yourself.
1. Phishing Email
It starts with a message claiming that your recent emails didn’t go through. The email might use your provider’s logo and branding to appear official, warning that your account will be suspended unless you update your password or confirm your account details immediately. This creates a false sense of urgency, pushing you to act quickly without thinking.
2. Fake Login Page
If you click the link in the email, you’ll be redirected to a phishing site that mimics a legitimate login page. Once you enter your email address and password, the scammers instantly gain access to your account—and possibly much more.