Scammers are distributing fake admin notifications recommending that you add a recovery number to your email account.
Supposedly, this is a new security measure designed to keep your account safe. The message includes a link that will supposedly allow you to add your mobile number as requested. It warns that, if you don’t add the recovery number, your account will be deactivated and your emails will be lost permanently.
Clicking the link opens a scam website that asks for your email address and email account password. Online crooks can nab these credentials and use them to hijack your email account along with any linked services such as app stores or online file storage.
Genuine email providers sometimes do suggest that users supply a recovery phone number for added account security. The scammers are exploiting this fact by attempting to send messages that mirror such recovery number suggestions.
Keep in mind that genuine email service providers will not threaten to delete your account if you don’t immediately add a recovery number. Nor will they send an unsolicited email demanding that you click a link to add the number.
It is always safer to log in to your email account via a trusted app or by entering the address into your browser’s address bar rather than by clicking a link. If the service wants you to add a recovery number, you will likely be prompted to do so after you login.
A screenshot of the scam email: