"New voicemail" email phishing scam
These emails look like voicemail notifications and ask you to sign in with your email password to hear the message. The page is fake and steals your password.
How this scam works
With your email password, scammers can reset your other accounts and send scams to your contacts.
Common versions of the message
- A voicemail notification
- A sign-in with your email password
- A deletion deadline
What the message looks like
Email from Voicemail Service <voicemail@vm-notify.top>: New voicemail (0:42) from +1 (555) 013-2290
You have received a new voicemail message (0:42). To listen, sign in with your email password to verify your identity: http://vm-notify.top/listen. This message will be deleted in 24 hours.
Fictional example based on common, publicly reported scam patterns.
The red flags
- 1
Asks for your password: “sign in with your email password”
Voicemails never need your email password
Voicemails never need your email password.
- 2
Fake site: “vm-notify.top”
It copies a login page
The page copies a real login page.
- 3
Rushed deadline: “deleted in 24 hours”
So you log in before you think
The deadline is pressure.
What to do
- Do not click the link or sign in.
- Check voicemail on your phone or phone system directly.
- Report the email as phishing and delete it.
If you already replied, clicked, or paid
- Change your email password right away and turn on two-step verification.
- Check your email settings for forwarding rules you did not set.
- Tell your IT team if it was a work account.
Got a message like this?
Paste it into TrustShield's free checker to see the warning signs in seconds. No sign-up needed to try it.