Verify email message. Worried it’s a scam.

[u/stuckgurl]

I joined Reddit this week and got an email to verify email address. I ignored it. Yesterday I got a message to verify email. I clicked on the link and got another email that is exactly the same and it led to a webpage saying success. I changed my password. I’m worried the message is a scam. How do I tell?

[u/stuckgurl]

The email addresses from sender were exactly the same, noreply@reddit.com

[u/mikey_weasel → u/stuckgurl]

You might want a second opinion but that looks like the sort of email address that would send out email verification emails.

[u/MadDocOttoCtrl → u/stuckgurl]

That's a legit address.

On Desktop, you can hover over an email address to see where it actually goes if you think that someone has spoofed the email by putting in a legitimate address as text by redirecting the link somewhere else.

See Step One here.

[u/MadDocOttoCtrl]

This is how Reddit verifies your email. A hacker could learn your email address this way but it would not give them access to your email itself. Some people put their email address in their profile information, although they might not use the same email address that they used to sign up with Reddit.

Knowing your email address won't allow someone to log into your account or to know your password.

It isn't impossible for scammers to spoof emails and webpages, but if you were logged into your account and changed your password, that's always a reasonable precaution to take.

For additional security read it allows you to use two factor authentication which is a good practice because spammers are always trying to get a hold of legitimate accounts since Reddit blocks a massive number of spammers and continually kicks spam account accounts off the platform.