The company said the message was not sent by Moonshot, no account compromises have been indicated so far, and it is investigating while urging users not to click links.
Moonshot alerted users to a phishing email carrying the subject line “View Recent Activity,” saying the message did not originate from the company. It said there are no indications of account compromises at this time and that an investigation is underway. Users were told to delete the email, avoid clicking any links, and contact official support through the in-app support feature if they clicked a link or entered a verification code. The warning underscores a common crypto security risk, where attackers use spoofed messages to trick users into sharing credentials or one-time codes.