Cybersecurity Reach Foundation
← All safety alerts
investigatingBrand: Signal

Fake Signal support messages ask for recovery keys

A message pretending to be Signal support claims that an account is at risk and asks the recipient to click Accept and provide a recovery key. This is a scam warning: never share a recovery key, registration code, verification code, password, or other account secret in response to an unexpected message.

Signal chat showing a message claiming an account is at risk and asking for a recovery key, with Block, Report, and Accept buttons visible.
A message pretending to be Signal support asks for a recovery key. Do not share account secrets in a chat.

What to do

  • Do not reply to an unexpected message claiming to be Signal support.
  • Never share a Signal registration code, verification code, password, recovery phrase, or other secret with someone who contacted you unexpectedly.
  • Open Signal directly and use its official in-app or help resources instead of links in the message.
  • If you shared a code or account information, secure the account through Signal's official recovery and security guidance.

What this alert does not establish

  • Scammers may change the wording or use a different account-warning story, but an unexpected request for a recovery key or other account secret is unsafe.
Last updated:

This alert is maintained from the shared Cybersecurity Reach Foundation / ScamArchive alert record.