We have received a report of a fairly sophisticated attack on a parent email account at AT&T (serviced by Yahoo). The attack works as follows: a parent’s email account is compromised. The original emails are deleted and substituted with look-alike emails with injected content by the attackers. The injected content can include links to websites selling goods, asking for donations, promotions or advertisements.

Anyone who sees links or dubious content in any of PushCoin receipts or other emails should immediately change the email account’s password to a unique, more secure one. We also recommend that all email accounts require second-factor authentication. In addition, never click on any links in the emails; PushCoin never includes links for this specific reason.

Feel free to contact ask@pushcoin.com regarding any email that you wish us to confirm if it’s authentic.