“Your account has been suspended. Verify within 24 hours or it will be permanently closed.” It is one of the most common phishing lines on the internet, and it works because losing an account feels urgent. The threat is fake, the link is the trap. Our GetMyPassword team explains how to recognize an account suspension scam and protect yourself.
How the scam works
You get an email or text claiming your account — a bank, email provider, streaming service or shop — is suspended, locked or about to be deleted. To “restore” it, you must click a link and confirm your details right now. The link leads to a fake login page dressed up to look real. Type your password there and you have just handed it to the scammer, who logs into the genuine account moments later.
Red flags to watch for
- Urgent threat of closure — “act within 24 hours or lose access.”
- A link to log in rather than an invitation to open the app yourself.
- A look-alike address — the sender or link domain is slightly off, not the official one.
- Generic greeting — “Dear customer” instead of your name.
- Asks you to confirm your password, card or personal details to “verify.”
Why it is so convincing
The message is engineered to bypass your judgment. The fear of losing an account, the countdown, and a page that looks pixel-for-pixel like the real one combine to make you act before you check. Scammers also send these in waves to customers of big services, knowing plenty of recipients really do have an account there — so the lie lands often enough to pay off.
Real services let you log in any time, on your terms. A message that says you must verify through this link in the next hour is not protecting your account — it is trying to take it.
How to protect yourself
Never log in through a link in a suspension message. Open the app or type the address yourself and check your account directly — if there were a real problem, you would see it there. Inspect the sender and URL for look-alike tricks, and never confirm a password by email. Most importantly, give every account a unique password from our password generator and turn on two-factor authentication, so even a password caught on a fake page cannot open the real account.
Frequently asked questions
How do I know if an account suspension email is a scam?
Look for an urgent threat of closure, a link to log in, a sender or domain that is slightly off, a generic greeting, and requests to confirm your password or details. Genuine services let you log in anytime without an emailed deadline.
What should I do if I get one?
Do not click the link. Open the app or type the official address yourself and check your account directly. If you already entered your password, change it immediately and turn on two-factor authentication.
Can two-factor authentication help here?
Yes. If a fake page captures your password, two-factor authentication means the scammer still cannot log in without your second factor. Combined with a unique password per account, it greatly limits the damage.