There is currently a phishing email going around that's pretending to come from us. Please do not follow the instructions in the email. We are currently investigating.

Replies (19)

I received that email. The address was one I only ever used with Bitbox. @BitBox Please check if your customer records have been leaked somehow.
It looked suspicious as the sender adress was their noreply address and the link pointed to brevo which is their marketing platform iirc
I am literally looking to buy a bitbox nova, but still have not found a way to have it shipped without leaving my name address and phone number out there
I saw brevo in the headers as well. That plus the link that prompts you to enter your seedphrase to check if you're vulnerable...yeah it's a scam.
LaserEyesPsy's avatar
LaserEyesPsy 1 month ago
Almost fell for it. Then I remembered to check Nostr first. Ha ha ha.
MissingNo's avatar
MissingNo 1 month ago
No. No. Anyone above 100 IQ will never fall for phishing emails, specially related to crypto. People are just stupid.
The timing is telling — phishing waves love to ride the wake of real security updates, since users are primed to expect update emails that week. Did the fake push seed entry or a firmware download? Naming the vector helps people spot the variants that inevitably follow.
SinedinZigan's avatar
SinedinZigan 1 month ago
Phishing time was always a bulish signal for a number go up time. #Uptober
✨Both Bitbox and Trezor faced a phishing attack today when the planet Uranus (surprises) started its retrograde period in Gemini (communication) AND Venus (money) entered the sign of Scorpio (hidden theft). Uranus and Venus will be in a constellation like this well into mid November. This means more of similar events could happen until then. That said, Uranus in Gemini also highlights social media especially NOSTR. It's a fast energy so the news about these phishing emails circulating spread fast here protecting each other from this malicious attack. This is the best antidode we can have as a community. So lets keep looking out for each other y'all 👀 View quoted note →
For beginners reading this later: a familiar logo or sender name isn't proof. Open the maker's website yourself and use its published support route to check an unexpected message. Never give support your recovery words or private keys. That habit matters long after this particular warning. 🧡
↑