Just a heads-up that the phishing campaigns targeting Fab publishers are still active; I received a new variant today.
Sender: Plutio (noreply@email.plutio.com).
Subject: Fab Account Verification Required.
Type: Financial scam.
Summary: Claims unusual login activity with mandatory identity verification within 48hrs to prevent “permanent account suspension”.
Status: Escalated to Plutio’s technical support team to terminate this workspace, with the redirect reported to Google Safe Browsing to trigger a warning if the link is clicked.
If you get this email, ensure that you do not click anything. Fab will never contact you using external subdomains (How can I check if it is really Epic Games contacting me?).
For reference, the body of the email is attached below:
"Hello,
Our automated security systems have detected unusual activity on your Fab account, including logins from unrecognized IP addresses and the use of proxy networks. ![]()
In accordance with standard anti-fraud protocols and to protect your assets, access to your account has been temporarily restricted. ![]()
Action Required ![]()
Please complete a brief verification procedure within 48 hours to restore full access. Failure to verify will result in permanent account suspension and a regulatory compliance flag. ![]()
The verification process includes:
• Confirmation of your payment method’s billing region ![]()
• 3D Secure authorization to confirm your identity ![]()
• An automatic reset of all active sessions for your protection ![]()
What you need to do:
Complete a quick verification to restore full access. 92% of users finish this in under 5 minutes. ![]()
[Click to verify]
Note: If you did not initiate this activity, completing this verification is still required to secure your account, revoke unauthorized access, and prevent potential misuse. ![]()
Sincerely,
Fab Security & Compliance Team ![]()
If you have any questions, simply reply to this email.
Thank you,
Fab Notification from Fab user Verification Portal"