I recently received an email asking me to confirm “my” account by clicking on a website link to Uphold, an international currency exchange service. Since I never set up an account and didn’t recognize the company, I went to the website and contacted them regarding this notice. On their contact list subjects they even have a link for “I didn’t request an account.”

Apparently what is happening is that a scammer is filling out an application to trade (with your information?) and your email address, hoping you will click on the link and confirm the account. Since they created the password and login information, once you confirm the account, the scammers have full access to the faked account.

I got a reply from Uphold, which details the scam. Uphold says that my email was culled from online breaches and was used to try to set up an account. So, anyone who has an email address anywhere online is vulnerable. The point is DO NOT click on a link to confirm any account that you have not created. This attack is subtle and confusing enough that you may think you have actually enrolled in something. Uphold is a legitimate business as far as I can tell, and so these requests may come from well known institutions. They may even come from institutions where you already have an an account, and may confuse you thinking you are confirming your existing account.

Just a Buyer Beware notice for your information.