Signal is rolling out a new set of security warnings designed to help protect users from phishing attempts and social engineering attacks. More changes are on the way.
Like all major platforms, Signal is increasingly affected by phishing and social engineering attacks. This does not mean Signal has been hacked or its encryption compromised, but that attackers are exploiting users through deception.
In response, Signal stated on social media (Mastodon, Bluesky, X) that it has added additional confirmations and educational messages in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal.
One of the changes is an additional notice that names in Signal are not verified. Signal does not verify profile names or identities, and profile names on Signal are chosen by the account holder:
Another improvement is an additional confirmation step when accepting message requests. After the initial message request screen, where you can block, report, or accept a request, a second confirmation pop-up appears reminding users to only accept message requests from people they trust, and that Signal will never ask for a registration code, PIN, or recovery key:
The other improvements are more detailed safety tips, such as don’t respond to chats from Signal, review names and photos and look out for scams:
With these new updates, Signal is strengthening its in-app protections against phishing and social engineering scams, and says more changes are on the way.
If you want more information about how attackers work and how to protect yourself on Signal, read our article: Tentativi di phishing su Signal – come funzionano e come proteggersi.
Resta informato
Vuoi rimanere aggiornato sulle ultime novità Signal notizie, suggerimenti e aggiornamenti? Seguici su Threads, Bluesky o Mastodon.
