Signal Confirms Phishing Attacks Targeting Accounts of Government Officials and Journalists

Signal, which is a free messaging app focused on maximum user privacy, has confirmed that several users, including some government officials and jurnalists have been targeted in a phishing attack, which has resulted in account takeovers of some users.
Here is more to it.
Signal Confirms Phishing Attacks
In a statement published via its official X handle, Signal clarified that its encryption and infrastructure have not been compromised. The attacks were carried out through sophisticated phishing campaigns, in which users were tricked into sharing account information such as SMS codes and/or Signal PINs, allowing attackers to gain access to their accounts.
Signal explained that attackers may impersonate a Signal support bot—which does not exist—and request users to share their SMS verification code or PIN. Sharing such information gives attackers access to your account. For those unfamiliar, Signal only requires an SMS verification code during the initial account setup. Therefore, if you receive a message asking for your SMS verification code at any other time, it is likely a scam/phishing attack.
We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously.
To be clear: Signal’s encryption and infrastructure have not been…
— Signal (@signalapp) March 9, 2026
The company emphasises never sharing your SMS code or PIN with anyone. Signal will never request these details except during account sign-up. In short, if you receive a message requesting your PIN, password, or SMS code, ignore it.

Signal also mentioned that it is actively working on adding clear visual and text-based warning signs within the app to alert users to potential risks, especially phishing. This feature aims to help users identify suspicious messages and avoid sharing sensitive information.
Stay tuned for more updates!