Some users have received fake or suspicious emails that look like they were sent by Twitter. These emails may include malicious attachments, or links to spam or phishing websites. Twitter doesn't send emails with attachments and never requests your Twitter password by email.
What you can do if you receive a fake email:
1. Forward the email to spoof@twitter.com
2. Delete the email from your inbox. Don't download any attachments from these emails.
Find out more about Twitter Safety on our Account Security page.
What's Phishing?
Phishing scammers send fraudulent messages to a large number of people, in an attempt to trick them into revealing private information, like a password. An email or website may be disguised to appear legitimate.
It can be difficult to recognize a spoofed email as they may look very convincing or appear to come from a Twitter email address. You can check the headers of an email to find out more about the source of the message, and you should be suspicious of new or unexpected emails. Twitter doesn't send emails that request your password or ask you to download an attachment.
What if I'm Worried that Someone Has Access to My Twitter Username and Password?
If you suspect your account has been compromised, you can find out what to do on our Compromised Accounts help page.
If Twitter believes your account has been hacked, we may reset the account password to prevent the hacker from misusing your account. In this case, we'll email you a secure link to where you can select a new password. Again, this link will always be on the http://twitter.com website, and we never ask you to email us your old password.
Why am I Getting These Fake Emails?
Twitter doesn't send these emails. The FTC has a help page that describes some ways spammers may find your email address:
http://www.ftc.gov/bcp/edu/pubs/consumer/tech/tec02.shtm
For more information about Twitter's policies on information collection, as well as disclosure and sharing, please visit our privacy page at http://twitter.com/privacy.
