WatchOut #5 · Investigating
Fake Signal support messages ask for recovery keys
Signal ImpersonationEmail & account scams
Who may be targeted: People who use Signal and receive unexpected account or support messages.
What we are seeing
A message pretending to be Signal support claims that an account is at risk and asks the recipient to click Accept and provide a recovery key. This is a scam warning: never share a recovery key, registration code, verification code, password, or other account secret in response to an unexpected message.
Warning signs
- The message claims that the account is at risk or will be deleted.
- It tells you to click Accept or follow unexpected account instructions.
- It asks you to provide a recovery key or other secret in the chat.
- Signal's in-app review controls show Block and Report options for the contact.
Source and limitations — what this alert does not establish
- Scammers may change the wording or use a different account-warning story, but an unexpected request for a recovery key or other account secret is unsafe.
Published Aug 22, 2026. Published by the Cybersecurity Reach Foundation.
Send this to someone it could protect.