🚨 Mastodon DOES NOT ask you to verify yourself, EVER.

[stux@mstdn.social]

Mastodon DOES NOT ask you to verify yourself, EVER.

Currently there are scammers who want you to click a link by acting like #Mastodon staff

Please REPORT these accounts so we can ban them across the #Fediverse

WE DO NOT VERIFY PEOPLE ON MASTODON

[sortius@infosec.exchange]

@stux to paraphrase Australia's "my.id": on the Fediverse, the way I post verifies me

[finchhaven@sfba.social]

@stux

One account that I've seen (but not received anything from) on Mastodon dot World has already been nuked, so their admins are finally paying attention

[chris__martin@functional.cafe]

@stux Also seeing some sort of spam campaign regarding "monetizing your account" at the moment

[revk@toot.me.uk]

@stux one of the predictable issues with all this verification bullshit was fake verifications… annoying.

[louis@social.ikacode.com]

@chris__martin @stux I also got it and suspended the account (a ohishin attempt).

[xs4me2@mastodon.social]

@stux

Bumped into one tonight too...

[steve@social.coop]

@sortius @stux Or, as someone else put it, my voice is my passport.

[markbrigham@universeodon.com]

@stux Thanks. I had two of these show up this afternoon. I didn’t see the point, so I blocked them. Sounds like I made the right call

[poisonpunk@mastodon.social]

@stux
what about #GazaVerified ?

[draeath@infosec.exchange]

@poisonpunk @stux that's a separate and (I believe) legitimate thing people are trying to manage.

I see a lot of #gazaverified people acting kinda spammy, though, but I am never sure it's not just a misunderstanding of how to use the platform or sheer desperation.

[salty@mastodon.nz]

@chris__martin @stux Which is hilarious on the face of it. Of all the places to go to 'monetize your content' Mastodon ain't it.

[fallsmom@mastodon.coffee]

@stux

You keep our mastodon coffee pretty darn clean of bad stuff, thanx!

[mitsunee@mk.absturztau.be]

@stux@mstdn.social arguably they are failing to act like "staff" too, anyone who actually understands how fedi instances are hosted should immediately recognize the scam I saw earlier ​​

[ahrienby@mk.absturztau.be]

@stux@mstdn.social #sharkey and #lemmy instances will not ask you to verify too, ever.

[adminkirsty@infosec.space]

@MarkBrigham
Using the ellipsis (3 dots) below the toot, it brings up a menu which includes Report. It can also be done from the ellipsis on their account page.
As always, fedi.tips has this covered

https://fedi.tips/how-do-i-report-a-post-or-account-that-is-doing-something-bad/

@stux

[m3ow@bark.lgbt]

@stux my home address is 293 Tanglewood Dr, New Castle, PA 16105 can you please verify me

[pseudonymsupreme@pnw.zone]

@stux Just reported one myself. Yeeesh. Where’d they all suddenly spring up from?

[andres4ny@social.ridetrans.it]

@sortius @stux "my shitpost is my passport. verify me."

https://www.youtube.com/watch?v=-zVgWpVXb64

[travisj@indieweb.social]

@stux Reported!