Messages & accounts
A real permission screen, a malicious app
A shared file or invitation opens a legitimate account permission screen, but the app requesting access belongs to an attacker.
What they want
Permission to read email or files without needing your password.
YOUR NEXT MOVE
Check through another route.
Verify the sender and review permissions. If granted, revoke the unfamiliar app in account security settings; changing a password alone may not remove access.
Already responded?
Stop contact and ask someone you trust for help. If you paid or exposed account details, contact the affected service through its official channel.
Get practical recovery steps ↗