Account recovery hijacking
●●●●○HardAn email confirms a change to your recovery address — which you didn't change.
0 / 10 free simulations used
New message · Fictional online service
Notifications <notifications@fictional-service-account.example-not-real.test>
Your account's recovery email address was changed successfully. New recovery address: r.dubois-pro@example-not-real.test If you didn't make this change, you have 24 hours to undo it from your account's security settings.
This simulation illustrates Account recovery hijacking. The article explains the full mechanism, the warning signs and what to do.