You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.

Forum Discussion

BARAKAKI's avatar
BARAKAKI
New member | Level 2
2 years ago

Dropbox allows hackers to create an account using your email address to send out phishing emails.

Dropbox allows hackers to create an account using your email address without any form of verification to send out phishing emails.  They then lock the account using 2fa preventing the real owner of the email address from getting in to take corrective actions.

  • Walter's avatar
    Walter
    Icon for Dropbox Staff rankDropbox Staff

    Hey BARAKAKI - thanks for posting on our Community.

     

    Can you let us know some additional information about the issue you're having so that we can assist further?

     

    Have you tried contacting our support team about this perhaps or reporting this through this form or emailing abuse@dropbox.com directly?

     

    Keep us posted!

  • JesGagnon's avatar
    JesGagnon
    New member | Level 2
    This just happened to my boss today too. Seems DropBox won’t do anything since they used their own cell number to set it up? Absolutely useless.
    • Walter's avatar
      Walter
      Icon for Dropbox Staff rankDropbox Staff

      Hey JesGagnon - sorry to hear about this.

       

      In this case, I'd suggest having your boss contact us directly as this would be the best way for them to get further assistance on this.

       

      Let me know if you have anything else to add or ask in the meantime. 

      • TonyEnglund's avatar
        TonyEnglund
        Collaborator | Level 9

        Just scrolling around and found this thread, and have noticed this flaw as well.

         

        This isn't a support case per user. There shouldn't ever be possible to create a dropbox account on a mail address you don't own. You can as it is today sign up for a dropbox account and use it without ever prove that you can read the mail account.