Watch For This Credential Stealing Scam on X
By: Jim Stickley and Tina Davis
January 26, 2026
A sophisticated phishing campaign is targeting X (formerly Twitter) users with fraudulent DMCA copyright infringement notices designed to steal login credentials and compromise accounts. Security experts warn that these fake messages appear convincing but are actually elaborate traps set by cybercriminals. So, if you use that service, be on the lookout and don’t click any buttons in the message.
The scam works by sending users official-looking notifications claiming their account has violated copyright laws through the DMCA or Digital Millennium Copyright Act. It might say something similar to some recent activity on your page may not fully meet our community standards. Please take a moment to review the information below and ensure your shared content follows our usage rules.” The messages typically warn of account suspension or legal action unless the user immediately “reviews” their account details by clicking a malicious link. Once clicked, victims are redirected to fake X login pages where attackers harvest their usernames and passwords.

While you may not use anything that could violate the DMCA, many people do, particularly when posting videos, images, or using music in their posts. However, what makes these attacks particularly dangerous is their appearance of legitimacy—they often include official-looking logos, legal language, and urgent deadlines to pressure users into acting quickly without thinking critically.
If you receive a suspicious DMCA notice:
- Don’t click any links or buttons in the message
- Verify authenticity by logging into X directly through your browser (not the message link)
- Check X’s official Help Center for legitimate copyright notices
- Report the phishing attempt to X’s support team
- If you’ve already clicked:
- Change your X password immediately
- Enable two-factor authentication
- Review your account for unauthorized activity
- Monitor your email for password reset attempts on other accounts
Remember: Legitimate DMCA notices from X follow specific formats and never pressure you to click links urgently. When in doubt, navigate to X independently rather than clicking message links.