Callback Phishing Targets Robinhood Users with Fake Alerts

• •Callback phishing campaign impersonating Robinhood is actively targeting users.
• •Fake alerts create urgency, leading victims to call attacker-controlled numbers.
• •No specific numbers of affected users or tools are disclosed in the reports.

A callback phishing campaign is targeting Robinhood users by sending fake sign-in alerts that create urgency around potential account compromise. Victims receive unsolicited emails or SMS messages claiming unusual sign-in activity, prompting them to call attacker-controlled phone numbers. This method exploits users' fear of losing access to their accounts, effectively tricking them into providing sensitive information. The campaign has been reported to affect Robinhood users, but specific numbers of victims are not disclosed. No CVEs or specific tools are mentioned in the articles. The current status of the campaign indicates ongoing activity as of July 2026.