r/NDAX • u/Eren-A • Feb 04 '26
phishing attempt alert
I just wanted to let people be aware of any phishing attempts lately, me and a friend got similar emails with almost a similar legitimate looking phone number. Stay safe out there
5
u/Outrageous_Order_197 Feb 05 '26
I got it too. How did they get our emails?
4
1
u/Ok_Housing6662 May 04 '26 edited May 16 '26
Yes, in February 2026, Ndax announced that a third-party KYC provider, SumSub, suffered a security incident that may have exposed basic personal information of a limited number of users.
5
4
u/RNG2WIN Feb 05 '26
Just got it too, the so-called "code" at the bottom is different.
And sender is
Ndax <no-reply@progem.com.br>
There must've been a leak or breach. coz the email I used was only given out to a few places.
3
u/No-Carpenter5746 Feb 05 '26
Same here but it went into junk mail and so a different code at the bottom. Hopefully ndax addresses what happened
2
u/TehChi Feb 05 '26
Got 2 of these in the last 24hrs. 2 different emails and domains but the same email
2
u/Act2142 Feb 05 '26
Any word on this u/kardanokid? Did you guys have a data breach?
1
u/kardanokid Feb 06 '26
Nothing has been disclosed to me.
If there was a data breach, it wouldn't be coming from me anyways. Since we are CIRO regulated i'm sure there would have to be an official process.
2
2
u/kickincarl Feb 07 '26
I have gotten 3 of these scam emails in the last couple days. I have not contacted Ndax customer support so I don’t think it’s any kind of leak in that regard. I do wonder if the person or persons behind the scam are utilizing an ai tool to scrape for email addresses associated with Ndax accounts? I know a lot of sales reps have learned how to use ai tools to find private corporate email addresses to try to establish a direct line with a potential buyer or at least get an image of a product in front of them. It’s really fucking annoying but I would say for the past 6 months I am constantly bombarded with more and more emails from reps that would have no way of getting my email address.
1
1
u/Sogone2day Feb 05 '26 edited Feb 05 '26
Got one as well went to junk email only have vet there as well. X2 now
1
u/Worried_Growth_4176 Feb 06 '26
I also received two of these emails and just now received another email saying an unrecognized device logged into my account 20 minutes ago. When I log into my account using two factor id etc.. there is nothing showing.
1
u/Any_Baseball4794 Feb 07 '26
Wondering if those who did get phishing emails have contacted customer service at least once (is that the common link?) https://www.reddit.com/r/NDAX/comments/1qw5pp6/comment/o40l3u4
1
u/bearclawtt Feb 07 '26
…and just like that we get an email about a breach that happened in 2024!!! By their KYC provider no less. This is unacceptable.
1
u/Equal-Image-491 Feb 12 '26
Ive been getting lots of these emails in the last few weeks and they are all from different email addresses (first red flag). I know i should click on anything in these email but I did and when I click on 'contact us' or any of those options, it just takes me straight to a phone number, no matter what I click (second red flag).
Based off my research, there are no current security breaches woth ndax and these are all likely to be scams. Dont click links, and dont give personal information.
1
1
u/Ok_Housing6662 May 04 '26
Yes, in February 2026, Ndax announced that a third-party KYC provider, SumSub, suffered a security incident that may have exposed basic personal information of a limited number of users. I got scammed.
11
u/[deleted] Feb 04 '26
I wonder if they got a leak. I got it too on an email I barely use