How are crypto users being targeted by a phishing scam using a Google domain?

A sophisticated phishing scam is targeting cryptocurrency users by exploiting a legitimate Google domain. The attack involves manipulating a Google backup contact request form, where attackers insert extensive text into the name field. This pushes the genuine system message out of view and replaces it with a deceptive security alert and phishing link. This method leverages the trust users place in Google’s domain, making the scam particularly effective. Crypto holders face significant risks, including the potential loss of private keys and exchange credentials, leading to irrevocable fund theft. To combat this threat, users are urged to adopt a zero-trust approach, independently verify alerts through official channels, enable two-factor authentication, and ensure careful confirmation of transactions on hardware wallets. Maintaining vigilance against evolving social engineering tactics is crucial to safeguarding digital assets.