A sophisticated scam targets Signal users by impersonating the company's official support team. Hackers send messages claiming to be from Signal Support, pressuring recipients to verify their accounts or claim they need to move their chat backups to a new server.
These fraudulent messages contain links that direct users to fake Signal login pages. When parents or teens enter their credentials, scammers gain access to encrypted chat histories, photos, and other sensitive data stored in Signal backups.
Signal itself remains secure. The app's end-to-end encryption protects your messages during transmission. The vulnerability exists in user behavior, not the technology. Hackers exploit trust in the Signal brand name.
Here's how to stay safe. Signal Support will never ask you to verify your account through direct messages or links. The company does not solicit passwords or login credentials via chat. If you receive unsolicited messages claiming to be from Signal, delete them immediately.
Verify requests directly. Navigate to Signal's official website or open the app itself without clicking links from messages. Check your account settings within the app if you have concerns about your backup status.
Use strong, unique passwords for your Signal account. Enable two-factor authentication if your version of Signal supports it. Keep your phone's operating system and the Signal app fully updated, as patches often fix security vulnerabilities.
Educate family members about this scam. Children and teens may not recognize phishing attempts. Explain that legitimate companies never request passwords through messages or emails.
If you suspect someone accessed your account, change your password immediately and review your chat backup settings. Signal allows you to disable cloud backups entirely, storing conversations only on your device instead.
The scam represents a broader pattern where hackers leverage app-specific language to seem legitimate. Teaching critical thinking about unexpected requests protects your family's digital privacy more effectively than any single security feature.