Search the briefing
Try “phishing,” “identity theft,” or “security key.”
Tagged reports
Never share a WhatsApp registration code or two-step verification PIN. If the account was taken over, register your phone number again through the official WhatsApp app and follow its stolen-account guidance. Review linked devices, enable two-step verification, and warn contacts…
Verify a Telegram contact through a previously known phone call, account, or shared context. A display name, username, profile photo, or forwarded message can be copied. Telegram login codes should not be shared, and support boundaries should be checked in…
A Discord moderator or support process should not require your password, token, payment, or a QR login scan sent by another user. Do not open free-gift links or files from unexpected messages. Use Discord’s official app, safety pages, and support…
Verify the recruiter’s identity, work history, company relationship, email domain, and the opening on the employer’s official careers page. Do not pay for equipment, training, checks, or placement, and do not provide an SSN, bank data, password, or ID image…
Scammers often move conversations off-platform to avoid automated warnings, moderation, transaction rules, report history, and purchase protection. A request to switch apps is not proof of fraud, but immediate pressure—especially before identity, goods, or payment are verified—should stop the transaction.
Turn on two-factor authentication first for email, financial, password-manager, cloud, mobile-carrier, and social accounts. Prefer a passkey, hardware security key, or authenticator app when supported; text codes are still better than a password alone but can be exposed by phishing…
Use facebook.com/hacked from a device you have used for Facebook before. Secure the email account that controls recovery, review where you are logged in, remove unknown contact details and apps, change the password, and turn on two-factor authentication. Warn contacts…
