Uphold Email Scam - How to Protect Yourself

Do not click any links, do not call any phone numbers listed in the email, and do not provide your two-factor authentication (2FA) codes.

Common Varieties of the Uphold Scam

• The Fake Data Breach Email: Scammers send official-looking security alerts claiming a third-party data breach exposed your information. They urge you to call a fraudulent "Uphold Security Hotline" to secure your assets.
• The Unrecognized Device Login: The message claims someone logged into your Uphold account from a distant location (e.g., Singapore). It requests that you call a phone number immediately to block unauthorized transactions.
• Crypto Loyalty Payments: These messages offer a financial bonus or "loyalty reward" if you connect your self-custody wallet to a provided link, which actually drains your funds.
• Unsolicited Account Verification: If you do not have an account but receive a "Verify your Uphold email" message, a scammer is using your email address to register a fraudulent profile.

Strategic Golden Rules for Uphold Security

• Uphold never calls you: The platform will never call you on the phone out of the blue to discuss account security or ask you to move funds.
• Never share 2FA codes: No legitimate Uphold employee will ever ask you to read out, forward, or text a 2-factor authentication code.
• Verify the URL manually: Fake links often look real on mobile screens. Always type wallet.uphold.com directly into your browser rather than clicking email links.