i live so i love ♡

Despite the few posts regarding this type of situation, I really feel like people need to be aware because this is actively happening on Tumblr right now.

Hi everybody, I hope you’re all doing okay. Unfortunately, I need to raise a flag about something that could easily happen to any of us, even if you think you’d never fall for a scam.

A few days ago, oomf told me and a few other creators about a new method scammers are using to target Tumblr accounts through DMs. And now that it almost happened to me, I’m taking it seriously enough to make this public.

Here’s how the scam works:

You receive a DM from someone claiming they “accidentally reported your account,” since you had the same picture as the account they were intending to report. They sound apologetic, friendly, and insist they need to “fix the report” by adding you on Discord. Once you accept, they ask you to change the email associated with your Tumblr account under the excuse of “verifying you” or “reversing the report.”

That is the scam. If you change your email, you’re handing over full access.

It’s manipulative, and it preys on creators who don’t want their accounts taken down, plus they use those suspicious “do you write with AI?” messages and other baiting tactics that have been circulating recently.

Someone close to my friend almost lost all their information because of this exact trick: Here's the evidence:

And here's mine. Thankfully, I remembered the message and I didn't fall for that:

Also, it's not your normal bot account that does that, it leggit looks like a normal fan account (but it could be that the account also got hacked and is impersonating as that person), so please, please stay alert. Tumblr will never ask you to switch emails, join Discord, or speak to a third party to “fix” a report. If you ever get a message like this:

Do not add them anywhere.

Do not follow any instructions.

Do not change your email, password, or settings for them.

Just block, report, and move on.

I’m sharing this so no one else gets caught off guard. Stay safe, protect your accounts, and look out for each other. If you’re a creator, writer, or artist, you’re especially a target.

If anyone needs help figuring out whether a message is legit, feel free to ask me or others who’ve been warned about this (one example can be this post by @4doras)

TAGGING MY MOOTS: @astrae4 @loserlvrss @coriihanniee @kwiwin @pumpkg @v4mpriki @stxrrywoo @wichujunseo @hanfourz @viesin @jaylaxies @ikeuverse @ihankaji @heesera @taestulipss @kaikaikoi @karinasbaby @teacuplps @moesthinking @gyurilla @lovehakie @tobiotaesan @woongelaatin @tsanho

ALSO, I know it can be a little annoying with the tags, but it's to make the message reach more people.

UPDATE: This person also sent me a message and I simply blocked this user just in case.