Someone tried to phish me - update

Someone tried to phish me - update

Honestly figured I'd share what went down, since this stuff keeps popping up and it's good to keep everyone sharp. Got a random DM the other day from an account claiming to be "customer support" for a vendor I've used before. They had my username right — that's what made me think twice at first. But then they asked me to click a link to "verify my account details" because of "suspicious activity." Whole thing screamed red flags the second I saw the link. It wasn't even a proper domain, just some garbled .xyz address that didn't match anything official.

I've noticed a pattern with these. They always create a false sense of urgency — like "Act now or your order won't ship" or "your account will be suspended." They'll copy the logo and formatting from legit sites, sometimes even the same font and color scheme. But the domain is always slightly off — like .net instead of .io, or an extra letter in there. They rely on you being in a hurry or worried, tbh. Another big tell: real support teams in this community never reach out via Reddit DMs, Telegram DMs, or Discord first. If they need you, they'll email the address you registered with, or you'll see an official post on the forum itself. End of story.

Best way to protect yourself is dead simple. Never click links from unsolicited messages. If someone claims to be support, go directly to the official site or forum and check there. Bookmark the real URL. Use a password manager that auto-fills only on the correct domain — that'll save you if you ever land on a fake login page. And for the love of god, never share your full name, address, or any payment info in a chat. Support only communicates through official channels, period. If they say otherwise, it's a scam. Stay safe out there.

Report that account if you can

Good catch. Never give out your password to anyone

Thanks for sharing! This is helpful