We’ve identified recent phishing campaigns impersonating Intercom and targeting customers’ support addresses.
Intercom has not sent any emails about MFA-related incidents. Watch out for lookalike domains — for example, send[.]intercorn[.]com.
Attackers are using legitimate email-sending services, which can let these messages slip past filters into your inbox. Please stay alert when reviewing unexpected emails that appear to come from Intercom.
How can I spot phishing?
The advice with phishing is always:
Check the sending domain — never trust a display name. Many phishing messages use lookalike domains that differ by only a character or two.
Be cautious of messages designed to create urgency or fear. Phishers rely on pressure to rush people into handing over credentials.
Use a second channel to confirm. If you receive something claiming to be from us — especially by email — you can always reach out through the Intercom Messenger to check whether it’s legitimate.
If something feels off, even slightly, pause before clicking links or sharing credentials. Even a brief pause can make all the difference.
Link warnings & interstitials
Intercom warns you about known suspicious links before you click them and shows an interstitial if you’re redirected to an untrusted domain.
Should I secure my workspace?
If you’re relying on a username and password to log in to your workspace, there’s a better way. Passwords are easy to guess or crack, making them a common entry point for attacks.
We strongly recommend using 2FA, Google SSO, or SAML as a login method for your workspace. You can require one of these methods for all teammates in your security settings.
⚠️ After enabling a stronger login method, disable username and password logins for your workspace.
Disable this in Settings → Workspace → Security.
If you clicked a phishing link and entered your credentials, reset your password immediately and review recent activity in your workspace via your Teammate Activity Logs: Settings → Workspace → Teammates → Activity Logs
Need more help? Get support from our Community Forum
Find answers and get help from Intercom Support and Community Experts