Hi everyone,
I recently received an email sent from noreply@email.plutio.com, with the subject line “Fab Account Ownership Confirmation”.
The email states that I must complete mandatory KYC‑AML identity verification as a Fab publisher within 48 hours. It warns about account restrictions including disabled asset publishing, hidden listings, suspended payouts, read‑only storefront access, and permanent account suspension plus forfeiture of pending balances if I fail to comply.
It asks for bank card details and proof of financial capacity. When I clicked the “Complete KYC Verification” button inside the email, the short link https://zzb.bz/UlZrAq redirected me to an external site: https://xcqyl.com/264340878
This webpage prompts me to enter my bank card information.
I have pasted the full email text below:
Hi there, As part of our updated KYC/AML compliance framework, all Fab publishers are required to complete identity verification. This is a mandatory step to ensure marketplace integrity and prevent fraudulent activity across the platform. Your account has been flagged for review because your current profile information does not meet our updated verification standards. Until this process is completed, the following restrictions will apply: • Publishing new assets disabled • Existing listings hidden from search results • Payout processing suspended • Storefront access limited to read‑only mode You have 48 hours to complete verification. Failure to comply within this window will result in permanent account suspension and forfeiture of pending balances.
Requirements: — confirmation of active bank card details — verification of financial capacity It takes approximately 2–3 minutes. Click here: Verification
This is an automated compliance notification from Fab Marketplace Trust & Safety. Do not reply to this message. Compliance Policy · KYC Requirements · Account Suspension Appeals Fab Marketplace · Epic Game If you have any questions, simply reply to this email. Thank you, Fab Notification from Fab user Verification Portal
Could anyone confirm whether noreply@email.plutio.com is an official Fab / Epic sender? Are zzb.bz and xcqyl.com legitimate Fab‑owned domains for KYC verification? Or is this a phishing attempt trying to steal my banking information?
I have not submitted any personal data on that external site. Thank you for any help or information.