Identify legitimate {TKN_PRODUCT_YAHOO_NAME} websites, requests, and communications

Scammers are always looking for ways to get personal info with malicious intent. Know how to recognize legitimate {TKN_PRODUCT_YAHOO_NAME} websites, requests, and communications to keep your account secure.

{TKN_PAID_PHONE_SUPPORT_TEXT}

{TKN_PRODUCT_YAHOO_NAME} websites

If you're on a {TKN_PRODUCT_YAHOO_NAME} website, the URL contains "yahoo.com". Another indication that the site is secure is the presence of the lock icon Image of a lock icon. in the address bar.

{TKN_PRODUCT_YAHOO_NAME} requests

We never ask for personal info, such as credit cards or passwords, in emails. However, from time to time, we'll ask you to update your recovery info after signing in. You'll also get a notification titled "Your {TKN_PRODUCT_YAHOO_NAME} account information has changed" if any info in your account settings are updated.

What {TKN_PRODUCT_YAHOO_NAME} communications look like

  • Viewing from web-based email - Emails from us include a {TKN_PRODUCT_YAHOO_NAME} icon Image of the {TKN_PRODUCT_YAHOO_NAME} icon. next to the subject or sender. If you don't see it, then the email isn't from {TKN_PRODUCT_YAHOO_NAME}.
  • Viewing from 3rd-party apps - The {TKN_PRODUCT_YAHOO_NAME} Image of the {TKN_PRODUCT_YAHOO_NAME} icon. icon won't appear in apps, even if the email is truly from us. Check the sender's email address without opening the email by mousing over the sender's name in your Inbox.

Reasons you'll receive notifications

  • Your review of content on {TKN_PRODUCT_YAHOO_NAME} (such as travel destinations and local businesses) received a response.
  • There's important activity related to your account, such as password changes or expiration of a credit card you use to pay for any {TKN_PRODUCT_YAHOO_NAME} services.

Best practices to keep yourself safe

Best practices

  • Don't enable the "use less secure apps" feature.
  • Don't reply to any SMS request asking for a verification code.
  • Don't respond to unsolicited email or requests to send money.
  • Pay attention to the types of data you're authorizing access to, especially in third-party apps.
  • Use only legitimate third-party apps, which won't ask you for {TKN_PRODUCT_YAHOO_NAME}'s two-factor verification code.
  • Don't use internet search engines to find {TKN_PRODUCT_YAHOO_NAME} contact info, as they may lead you to malicious websites and support scams. Always go directly to {TKN_PRODUCT_HELPCENTRAL_NAME} for legitimate {TKN_PRODUCT_YAHOO_NAME} customer support.
  • Never click suspicious-looking links. Hover over hyperlinks with your cursor to preview the destination URL. Sometimes a hyperlink can be displayed as a {TKN_PRODUCT_YAHOO_NAME} link in an email, when in fact the destination URL will be a malicious domain.
  • Be careful when authorizing an app to access your account or when providing any third-party access to your account info. Applications officially supported by {TKN_PRODUCT_YAHOO_NAME} go through an industry-standard vetting process that offers a clear, obvious authentication known as OAuth 2.0.
What to watch out for
  • Spoofing - used by spammers to make an email or website appear as if it's from someone you trust.
  • Phishing - an attempt by scammers to pose as a legitimate company or individual to steal someone's personal information, usernames, passwords, or other account information.
  • Fake email addresses - Malicious actors sometimes send from email addresses made to look like an official email address but in fact is missing a letter(s), misspelled, replaces a letter with a lookalike number (e.g. "O" and "0"), or originates from free email services that would not be used for official communications.
If you think your account has been compromised