Treat an unexpected Uphold email scam or text as suspicious until you verify it outside the message. Do not use its link, reply, download an attachment, move funds, or share a two-factor authentication code.
Uphold is a real digital-asset platform. A fake Uphold email impersonates the company to steal account access, financial information, or cryptocurrency.
Short answer
Open the Uphold app or type the official site address yourself. Check whether the transaction, device, phone-number change, or security event appears in your account. Contact Uphold through its help center, not through a phone number or link supplied by the message.
What a fake Uphold email may claim
Uphold's official suspicious-message guidance says scammers may create messages that look real, demand urgent action, or ask the reader to verify a new payee, transaction, or device.
Common lures include:
- "Verify your account immediately."
- "A new device was approved."
- "Your phone number has changed."
- "A suspicious transaction is pending."
- "Your account will be restricted."
- "Read us the code to cancel this transfer."
- "Move your funds to a secure wallet."
These are examples of the pattern, not copies of active scam messages. The exact amount, phone number, and destination may change.
Is this Uphold email real?
Check the request and destination, not only the logo or visible sender name.
| Check | More consistent with a genuine notice | Strong phishing warning |
|---|---|---|
| Action | Tells you about account activity | Demands immediate action through its link |
| 2FA code | You enter it only inside the official flow you started | Caller or message asks you to read or forward it |
| Funds | No request to move assets for "protection" | Caller tells you to transfer to a safe wallet |
| Link | You independently open Uphold | Message sends you to a lookalike or unrelated domain |
| Contact | Support opened through Uphold's site or app | Unsolicited call, text, or private message |
| Attachment | Expected document with separately verified context | Unexpected ZIP, app, wallet file, or remote-support download |
Uphold states that it will never call to ask you to move funds or ask you to read or forward a 2FA code. That rule is more useful than trying to judge the caller's confidence or the email's design.
Check the full sender address
Uphold publishes its sender list in the official guidance. It includes addresses such as noreply@uphold.com, support@uphold.com, and certain addresses under help.uphold.com, upholdmail.com, and unboxed.uphold.com.
An exact published address is one useful check, but it is not the final proof. Display names can be forged, compromised accounts can appear in familiar threads, and a genuine notification can be copied into a fake message. Verify the account event inside Uphold.
If the message contains a link, follow our steps to check a link without clicking it. Do not visit a suspicious address merely to see whether it looks real.
What to do before clicking or replying
- Do not use the message's button, attachment, phone number, or QR code.
- Open the Uphold app directly or type the official address yourself.
- Check recent account activity, devices, security settings, and notifications.
- Contact support through Uphold's help center.
- If the message mentions a bank or card charge, check that institution separately.
- Never send cryptocurrency to "protect," "verify," or "unlock" the account.
- Never share a password or one-time code, and never move funds because an unexpected caller or message tells you to.
An unexpected attachment is not necessary to verify an account change. Before opening any file, use our attachment safety checklist.
What to do if you clicked or shared information
Act based on what you exposed.
You clicked but entered nothing
Close the page. Do not download anything or call a number it displays. Report the message and monitor the account for unfamiliar activity.
You entered your Uphold password
- Secure the email account connected to Uphold first if its password may also be exposed.
- Open Uphold directly and change the password.
- Use a unique password.
- Review active sessions, devices, security settings, and recent transactions.
- Enable or reset 2FA through the genuine account flow.
- Contact Uphold support and explain what happened.
You shared a 2FA code
Treat the account as at immediate risk. Change the password, review sessions and transactions, reset the 2FA method if necessary, and contact Uphold through its official help center.
You sent funds or disclosed bank information
Contact Uphold and the financial institution immediately through known channels. The FTC warns that cryptocurrency payments typically are not reversible, so speed matters. Preserve transaction IDs, messages, screenshots, and wallet addresses for reporting, but do not continue communicating with the scammer.
If the same lure arrived by SMS, see how to block scam texts and emails on iPhone after you have secured the accounts.
How to report a fake Uphold email or text
Uphold asks users to report suspicious messages to fraudprevention@uphold.com. Its help page says the team may request a screenshot.
Also:
- Use your email or messaging provider's Report phishing control.
- Report financial fraud to the FTC at ReportFraud.ftc.gov.
- Report substantial cyber-enabled theft to the FBI Internet Crime Complaint Center.
- Contact the bank or card issuer if payment details were exposed.
Redact unrelated balances, identification, and personal conversations before sharing screenshots unless the official investigator specifically needs them.
Frequently asked questions
I never opened an Uphold account. Why did I get the email?
It may be bulk phishing, a mistyped address, or an attempt to make you react. Do not create an account or use the message's link to investigate. Report and delete it.
Can a fake message appear in the same thread as real Uphold texts?
Uphold warns that suspicious messages can appear in the same thread as genuine ones. Thread placement is not proof. Verify through the app or official site.
Does Uphold ask for a 2FA code?
You may use a code inside a genuine sign-in or action you initiated. Uphold says it will never call and ask you to read or forward the code.
What if the email says my phone number changed?
Do not use the email's reversal link. Open Uphold directly, check your security settings and sessions, and contact official support if the change is real and unauthorized.
Can Rampart confirm an Uphold email is real?
No. Rampart can warn about phishing signals in SMS and connected email, but only Uphold can confirm account activity and transactions.
The safest next step
Ignore the route provided by the message. Open Uphold independently, confirm the account event, and contact official support if anything changed.
Rampart is available for iPhone if you want another warning layer for suspicious SMS and connected email. It checks phishing signals while keeping private messages private from family members. See what Rampart's SMS and email filtering does or download Rampart from the App Store.
Sources
- Uphold Help Center, Recognising suspicious texts or emails.
- FTC, What to know about cryptocurrency and scams.
- FTC, ReportFraud.ftc.gov.
- FBI, Internet Crime Complaint Center.