Skip to content
SafeKeep
Download

Back to library

The Account Closure Threat

An email or message saying your account will be closed within 24 hours, asking you to verify your details by signing in.

What it looks like

  • The email appears to come from a bank, an email provider, a social network or a delivery account.
  • It says your account will be suspended, verification is incomplete, or an unusual sign-in was detected.
  • There is a large "Verify my account" button, sometimes with a countdown.

How to spot it

  • Read the sender's full address. "support@bank-security-alerts.com" is not a bank; a company's mail comes from its own domain.
  • Hover over the button on a computer, or press and hold on a phone: the real address appears. If it differs, it is fake.
  • "Dear Customer" is a weak signal — but being addressed by name does not make it genuine either.
  • Real services do not close your account because you did not reply to an email.

What to do

  • Do not tap the button. Open the app or type the site's address yourself and see whether there is a warning waiting for you.
  • If something really is wrong, it will also be visible inside the app. If it is not, the email was fake.
  • Mark it as phishing and delete it.

If it already happened

  • If you entered your password, change it now — and change it everywhere else you used the same one.
  • Turn on two-factor authentication. It stops a stolen password from being enough.
  • Check the account's list of signed-in devices and remove any you do not recognise.
  • If it was your email account, start there: whoever controls your email can reset the password on everything else.

Common questions

I entered my password but the page showed an error. Am I still at risk?

Yes. The error page is usually part of the trick: it captures the password and then sends you to the real site. Change the password now.

They also asked for my two-factor code and I gave it.

Change the password immediately, then reset and re-enrol two-factor authentication. The code is single-use, so acting quickly means it expires unused.