We want to let you know that our security team has recently detected a series of phishing attacks and some of our users have already been affected. During these attacks, malicious sites impersonating Xapo’s platforms, requested crucial security information such as login credentials from our users.
At first glance, it is extremely hard to tell the difference between some attackers and a real site. This comparison below shows how difficult this can be.
Thanks for the heads up to the community.
Although I'm not a Xapo account holder, I think is becoming a common event now that there are a lot of phishing attempt or even a hack attempt that involves crypto so its really hard to protect ourselves from such attack. Use our common sense but sometimes its really hard to distinguished a attack from a legit email from exchanges. So I can only advise to be very careful and not to click on any links that we see specially in our email.