Someone just tried creating a Kraken Act with my email. I’ve verified that this isn’t a phishing attempt. I have MFA using an Authenticator app so *i think* my email should be protected, but does anyone have any thoughts around this and what this means for my emailsec?

Reply to this note

Please Login to reply.

Discussion

Interesting. I got the same alert recently.

Searching "Kraken email" on Twitter seems to indicate this is a known issue, and a decently widespread one.

They say they are aware of "email delivery issues" and are working to rectify it.

That’s a relief

They do this to see if you have an account somewhere. If you have a strong password and TOTP based (not SMS) MFA you should be fine.

They know you have an account at Kraken but can’t do much. They COULD try to social engineer kraken. If you wanted to be extra sure you could notify Kraken. They may have some procedures to put in extra precautions like requiring ID to make account changes.