


Disclosing how we know if an account was targeted is challenging as we do not want to provide our adversaries a roadmap to circumvent our detections, but we only notify a user if we have a high-degree of confidence that they have been targeted. Importantly and again, a notification does not necessarily mean your account has been accessed, rather we have reason to believe it may have been targeted. Legitimate notices from us are personalized and will provide guidance on what steps you can take to secure your account. If you receive an email with a login link that you think looks suspicious, be safe and go directly to or aol.com by typing either URL into your browser's address bar. Our email notices will never include attachments or ask you for your password. So what do you do if you receive a notification and how do you know if it’s real?

With the pervasiveness of government-backed threats on the rise, we see this system only becoming more relevant and useful to our users. We’ve made the new system multi-lingual, with over 75 languages represented. Notifications will reach users on desktop and directly on their AOL and Yahoo mobile apps and The system now serves all of our AOL Mail users, along with Yahoo Mail And while these notices do not necessarily mean that their accounts have been accessed by unauthorized third parties, they remind users to remain ‘paranoid,’ as we like to say, about their account security.īuilding off the success of this notification system, we’re announcing today some important updates: These users might include journalists or activists, or may include government officials and others who may have access to sensitive information. Since 2015, this system has notified tens of thousands of users that they may have been targeted by a government-backed actor. One product feature that’s proven to be highly effective is our government-backed notification system in Yahoo Mail. Evolving online threats to account security require evolving defenses, so we’re continuously investing in our security team and security features in our products to help keep bad actors at bay.
