Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Airtable Automations Email Scam - How to Protect Yourself
Airtable Automations Email Scam - How to Protect Yourself

Airtable automations are actively being used by scammers to send phishing emails that bypass traditional spam filters. Because the emails technically originate from legitimate servers (like noreply@airtable.com or through verified third-party API integrations like Gmail), security systems often mark them as safe.

How the Airtable Automation Scam Works

  1. The Exploitation: Bad actors create free or temporary Airtable accounts, set up internal databases with victim mailing lists, and trigger the "Automations" feature to send bulk emails.
  2. The Fake Lures: The emails mimic trusted brands. Common variations include:
    • Cryptocurrency/Hardware Wallet Scams: Phishing emails masquerading as brand verifications (e.g., fake Ledger or crypto wallet updates) directing you to malicious redirect links.
    • System / Subscription Errors: Fake billing updates or game platform alerts (like NYT Games payment errors) claiming your account will be suspended.
    • Fake Job Offers: Scammers scraping personal information, initiating contact via an "automated HR pipeline," and then trying to transition you over to encrypted messaging apps like Telegram to steal your banking info.

Red Flags to Look Out For

  • Mismatched Reply-To Address: The email may say "From: Airtable Automations," but the body or the link directs you to an entirely unrelated, fishy URL.
  • Urgent Action Required: Threatening language demanding you update payment details or verify your identity immediately.
  • No Unsubscribe Option: Automated emails from unverified databases that violate standard email compliance laws and offer no way to opt-out.

What to Do Next

  • Do not click any links or download any attachments in the email.
  • Do not reply or provide any personal/financial data.
  • Report it: You can forward the headers of the scam email to Airtable support (support@airtable.com) so they can ban the backend automation and account responsible for the campaign.
0

Comment sectionComments / Answers (0)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 0


waiting