Scammers are still sending us their fake Robinhood security alerts

Scammers are still sending fake Robinhood security alerts, with a text claiming that an automated security check detected anomalies and requiring users to follow a link to log in and review their account. The message carries red flags such as a foreign number from the Democratic Republic of the Congo (+243), urgent language like “Immediate Action,” a fake domain designed to resemble robinhood[.]com, and instructions to reply “Y” if the link isn’t clickable.

As the article notes, even if a user visits the link, they could encounter a convincing login page that hands over credentials and could enable scammers to empty the account, and some fake sites reportedly redirected to the legitimate site after showing a “verification complete” message, according to Malwaretips.

The piece lists several indicators of compromise and safety steps, including never replying to or following links in unsolicited texts, going direct to official channels, and using an up‑to‑date real‑time anti‑malware solution. It also advises actions if you click the phishing link, such as changing the Robinhood password and enabling two‑factor authentication.