Fake Support / Phishing

A message that looks like Coinbase, Apple, your bank — but isn't.

4 min read

The pattern

You get a text, email, or pop-up: 'Suspicious login detected. Verify now or your account will be suspended in 24 hours.'

The link goes to a page that looks identical to the real thing. The URL is slightly off: coinbase-secure.com, apple-id.net, paypa1.com.

Never click the link in the message
Open a NEW tab, type the URL yourself (coinbase.com, apple.com)
Log in there — if there's a real alert, it will be in your account
If you already clicked: change your password from a clean device, revoke active sessions, enable hardware 2FA

Real support never asks for your password, seed phrase, or 2FA code. Ever.

Independent primary sources used to check and corroborate the guidance on this page.

NIST National Initiative for Cybersecurity Education (NICE)
US national framework for cybersecurity work roles and competencies.
Financial Action Task Force (FATF)
Global AML/CFT standards referenced by financial-crime curricula.
FBI Internet Crime Complaint Center — Annual Reports
Primary loss and typology data used in fraud-investigation training.
US Federal Trade Commission — Consumer Sentinel Data Book
Official complaint statistics for teaching fraud trend analysis.