Message that asks you to approve a new app on your account
A message may ask you to open a file or confirm an event, then show a real sign-in screen that wants you to approve an app. If you approve it, the scammer can read your email and act as you, even without your password.
How it works
Since late 2025, the FBI has warned about 'OAuth consent phishing.' It often starts with an email or a direct message. The sender may pretend to be a public official, a journalist, or an event planner and ask you to open a shared file or verify that you are attending an event. The next screen can be a real permission page from a familiar company, asking you to allow an app to access your account. If you click Allow, the scammer's app can read and send email and reach other data. Changing your password may not cut off that access until you revoke the app in your account settings.
Red flags
- An unexpected message asks you to open a file or confirm an invitation by approving an app.
- You do not recognize or trust the app that is requesting access.
- The sender is new, or the request came through a messaging app from someone you were not already talking to.
- The permission screen asks for broad access, such as reading your mail.
What to do
- Do not click the link or approve the app unless you independently confirmed the request.
- If you already approved it, open your account's security or app-permissions settings and remove the unknown app.
- Tell your email or workplace IT provider, and change important passwords as a backup.
- Report the incident at ic3.gov and keep screenshots of the messages.
Where to report it
- reportfraud.ftc.gov — the FTC's report form.
- ic3.gov — the FBI's Internet Crime Complaint Center.