Robinhood users beware of new phishing scams

CryptoWorld News reports that Robinhood users have been warned to watch out for a new type of phishing attack. The attack uses Gmail’s “dot alias” feature and a vulnerability in the Robinhood account creation process to send malicious emails.

Users reporting on social media say they received warning emails from the platform’s mail server. The emails mention unrecognized device logins and include links to phishing websites.

Cybersecurity researcher Alex Eckelberry said the phishing campaign is not a hacker attack, but an exploitation of Gmail’s feature that allows fraudsters to create email addresses similar to those of the target users.

Eckelberry also noted that simply visiting a fake login website is not enough for hackers to gain access to an account, but entering sensitive information—such as passwords—could result in the account being stolen.

Robinhood’s support account confirmed on social media that some users did receive spoofed emails, and attributed the issue to a vulnerability in the “account creation process.”