Robinhood phishing emails: how to spot a fake account alert
Quick answer
Scammers send fake Robinhood emails and texts to steal your login. Robinhood says its support will never ask for your password, 2FA code or recovery phrase. Don't click the link. Open the app or type the address yourself, and report phishing to Robinhood.
- Comes by
- Email, Text, Phone call, Social media
- Pretends to be
- Robinhood
- Last updated
How it works
Robinhood is a real company and a victim here: scammers copy its look to get your login.
Robinhood's own help page describes the signs. The message uses urgent or frightening language, such as a threat that your account will be suspended. It comes from a sender whose domain is a lookalike, or a free Gmail or Yahoo address. It has a link to a fake login page or an attachment, often a supposed 1099 tax document, which can hold malware.
Some versions move to a call or message and ask you to send money through other apps, or to install remote-access software. Robinhood says anyone claiming to be from Robinhood who asks for your password, 2FA code or secret recovery phrase is running a scam.
What they want is access to your account and the money in it.
Red flags
- Threats that your account will be suspended or closed
- A sender address that's a lookalike of Robinhood, or a Gmail or Yahoo address
- Typos, awkward wording or missing words
- A .zip, .exe or .doc attachment, or a "1099" you didn't expect
- A request for your password, 2FA code or secret recovery phrase
- A request to send money through other apps or install remote desktop software
Example message
Robinhood security notice: unusual sign-in activity was detected. Your account will be restricted within 24 hours unless you verify your identity at [link].
What to do
- 1
Don't click or call
Don't use any link or number in the message. Open the Robinhood app or type the website address yourself.
- 2
Check the app
Robinhood says to confirm any message about your account inside the app.
- 3
If you entered your login
Open the Robinhood app, go to Security and privacy, then Devices, and remove any device you don't recognize. Then reset your password to a strong, unique one.
- 4
Change it everywhere
If you reuse that password, change it on other accounts and turn on two-step verification.
- 5
Report it
Robinhood asks you to send phishing to its report address, with full email headers, and to report fraud at ReportFraud.ftc.gov.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers don't pick targets at random. They buy or look up names, phone numbers, email addresses and home addresses from people-search sites and from breach dumps, then use them to make a message feel personal. If a scammer already has your email address, and knows you trade, the fake alert looks like it was meant for you. Serus finds the data brokers and people-search sites that list you where you live and removes you from them, and it alerts you when your details show up in a breach, so fewer scammers can reach you.
Frequently asked
Will Robinhood ask for my 2FA code?
No. Robinhood says it will never ask for your password, 2FA code or secret recovery phrase.
How do I contact real Robinhood support?
Robinhood says to contact support only through the app or its website contact page.
The email has a 1099 attached. Is it real?
Be careful. Robinhood warns that fake 1099 documents and other attachments can contain malware.
I clicked the link. What now?
Check your devices in the app and remove any you don't know, reset your password and turn on two-step verification.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
