#account security

Hey Tumblr, your security is super important to us. In light of a recent surge in scams, we want to make sure you have all the tools and knowledge to keep your account safe:

Verify the source: If someone claiming to be from Tumblr Support reaches out, always check the sender's email address. Official Tumblr communication will come from tumblr.com or tumblr.zendesk.com domains, and Tumblr will never contact you via another platform.

Don’t click suspicious links: Check the destination of a URL before clicking, and look for anything that doesn't seem right, such as a misspelled website name. 

Recognize phishing: Phishing messages or emails often try to create a sense of urgency ("Your account will be suspended if you don't click here now!"). They might also contain grammatical errors or poor formatting. 

Never share your password: Tumblr staff will never ask you for your password. If anyone asks for your password, it's a scam.

Enable Two-Factor Authentication (2FA): This adds an extra layer of security. Even if someone gets your password, they can't access your account without the second verification step. You can enable 2FA in your account settings.

For more on avoiding scams and keeping your account safe, check out the Help Center. 

Just a heads up in case anyone else receives a similar message.

I was recently contacted by someone claiming they had mistakenly reported my account because they believed I was involved in a scam. They later shared a screenshot of what appeared to be a Tumblr support email featuring my username and profile picture.

After looking into it and contacting Tumblr Support, this appears to be a known phishing scam that Tumblr is already aware of.

The scam may involve:

Someone claiming they accidentally reported your account

Screenshots of fake Tumblr emails showing your username/blog

Claims that your account is under investigation, at risk of deletion, or needs to be "verified"

Requests to contact a supposed Tumblr support agent, often on Discord or another platform

If you receive a message like this, please be cautious and do not provide your login information or contact unofficial support accounts.

In my case, another mutual received the exact same message from the same user, which suggests the account may have been compromised and is being used to spread the scam.

If you're unsure whether a message is legitimate, contact Tumblr Support directly through official channels.

Please reblog even if this hasn't happened to you. A mutual and I encountered the same scam account, so there are likely more people receiving these messages.

HUH??? (@dead-poets-in-hellton-offical is my side blog) What the hell is that??

Hey Tumblr, la tua sicurezza è molto importante per noi. Alla luce del recente aumento delle truffe, vogliamo assicurarci che tu abbia tutti gli strumenti e le informazioni per mantenere al sicuro il tuo account:

Verifica la fonte: se qualcuno che afferma di far parte del Supporto Tumblr ti contatta, controlla sempre l’indirizzo email del mittente. Le comunicazioni ufficiali di Tumblr provengono solo dai domini tumblr.com o tumblr.zendesk.com, e Tumblr non ti contatterà mai tramite altre piattaforme.

Non cliccare su link sospetti: controlla sempre la destinazione di un URL prima di cliccare e fai attenzione a dettagli che non tornano, come nomi di siti web scritti male.

Riconosci il phishing: i messaggi o le email di phishing cercano spesso di creare urgenza (“Il tuo account verrà sospeso se non clicchi subito qui!”). Potrebbero anche contenere errori grammaticali o formattazioni scadenti.

Non condividere mai la tua password: lo staff di Tumblr non ti chiederà mai la password. Se qualcuno lo fa, è una truffa.

Attiva l’autenticazione a due fattori (2FA): aggiunge un ulteriore livello di sicurezza. Anche se qualcuno ottenesse la tua password, non potrebbe accedere al tuo account senza il secondo passaggio di verifica. Puoi attivare la 2FA dalle impostazioni del tuo account.

Per ulteriori informazioni su come evitare truffe e mantenere al sicuro il tuo account, consulta il Centro assistenza (pagina in inglese).

There’s a scam going around where another Tumblr user messages you saying something like:

“I accidentally reported your blog, and Tumblr emailed me about it — please contact their staff on Discord to fix it.”

This is not real. Tumblr staff will never contact users on Discord, and they’ll never ask you to change your email or verify anything off-site.

The “email” they show you and the “staff” on Discord are both fake. It’s a phishing scam meant to steal your account.

✅ If you get this message:

• Don’t reply

• Don’t click anything

• Report and block the account

• Forward screenshots to [email protected]

Stay safe and help spread the word 💙