TikTok contacted me on Instagram?

[oatmeal]

I was contacted by TikTok on my IG account saying they reviewed my account
and said I was eligible for the Approval Badge.

They gave me a unique link to click on and go there to verify my account
by inputting all my info (username, email and password).

After I completed it I thought to myself, what if this is some phishing scam trying to get
my account info. uh oh.

So I just wanted to ask does TikTok contact you on your IG account to do this? Why wouldn't
they just message me in my TikTok account messages to give me the approval badge?

The message is from: TikTok Support and Tiktok Verification Team

the link was to: tiktok-help-team.ml

 

[Meerakat]

I was contacted by TikTok on my IG account saying they reviewed my account
and said I was eligible for the Approval Badge.

They gave me a unique link to click on and go there to verify my account
by inputting all my info (username, email and password).

After I completed it I thought to myself, what if this is some phishing scam trying to get
my account info. uh oh.

So I just wanted to ask does TikTok contact you on your IG account to do this? Why wouldn't
they just message me in my TikTok account messages to give me the approval badge?

The message is from: TikTok Support and Tiktok Verification Team

the link was to: tiktok-help-team.ml

Good job, you just fell for the scam.

 

[Captain_Nothing]

You cannot be serious.. I hope you are trolling.

 

[Gdlobo]

Phishing scam.. Why would they need your password for?!

 

[oatmeal]

What should I do? Change my password?
The links look legit all point to the real tiktok
unless the tiktok page on IG is also fake?

 

[oatmeal]

Phishing scam.. Why would they need your password for?!

for me to verify my account (to prove that I am the real tiktok account owner)

 

[resurrects]

what's the @ of the page that messaged you on instagram?

 

[xwolf00]

Change your password fast!!!

 

[oatmeal]

I already went into my tiktok account and changed my password.

You can only change the password by verifying the PHONE Number.

I never gave my phone number to the tiktok message so they can't change my password anyways.

 

[oatmeal]

what's the @ of the page that messaged you on instagram?

I think it is "tiktokverifiedhelpteam"

 

[resurrects]

I think it is "tiktokverifiedhelpteam"

definitely a scam. good thing you changed password

 

[oatmeal]

I tried googling it up and found NOTHING on tiktok scams or tiktok account phishing on instagram. I searched up tiktok-help-team.ml and didn't find anything on scam or warnings or abuse....can anyone also do a search and tell me if you found anything on this? Either i missed it completely or this is a new scam?

 

[italianstarman]

Scam my friend! Be aware!

 

[oatmeal]

definitely a scam. good thing you changed password

but why hasn't ANYONE reported this? I tried a search on google and nobody has reported this scam?
I would imagine this would be pretty big news and everyone would be posting about this.

Yes, I changed my password which required my mobile number which I never gave nor did the approval application
request my mobile number.

 

[silentHQ]

Yeah, you got scammed/phished.

That url goes to a blank ftp directory page. Clicking through the ftp folders I was able to find their fake home page. Most of the links at the bottom of that page lead to 404 error pages since those pages do not actually exist.

Also, a whois search on their domain at their domain registrar indicates that it's a free domain with no contact or company details listed. http://whois.freenom.com/cgi-bin/whois?domainname=tiktok-help-team.ml&lookup=GO

 

[oatmeal]

Yeah, you got scammed/phished.

That url goes to a blank ftp directory page. Clicking through the ftp folders I was able to find their fake home page. Most of the links at the bottom of that page lead to 404 error pages since those pages do not actually exist.

Yes, the more I am researching right now I can confirm this is all fake.
That was a close call! My Tiktok and IG are linked and I should be eligible for an approval soon so I thought it was real. Thank goodness they didn't ask for my phone number. Without it, they can't change my password. Only I am allowed to change my password on Tiktok. I guess they could have done other stuff.

 

[Gdlobo]

Why would tiktok use a .ml domain? That is a domain for Mali.. "Country in Africa"

 

[jonnyinsta]

change your password as soon as possible .. it's a phishing attack

 

[CodeDev]

First of all, there is no reason Tiktok should contact you on Instagram. Second, .ml domains are frequently spam, and so it's pretty suspicious of them to use it. Not to mention the requesting of password. More red flags than a communist rally.

 

[silentHQ]

but why hasn't ANYONE reported this? I tried a search on google and nobody has reported this scam?
I would imagine this would be pretty big news and everyone would be posting about this.

I did a Google search for 'tiktok password phishing' and found the following article: https://www.bleepingcomputer.com/ne...s-are-targeting-your-social-network-accounts/ Towards the middle of that article, they show a screenshot of the same exact 'verification badge' password phishing form used on the site you mentioned; they also mention TikTok among other sites/apps.