nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Received a Spam invitation from Atlassian account scamming users

Steve_5r34lc

Hello,

I hope you’re doing well. I received an invitation that I thought was real and got added to a bitcoin spam/scam project in Atlassian. I believe these users are abusing Atlassian accounts. I immediately changed all my information (name, e-mail, password) and deleted my account. I created this one so that I can reach you here.

I already emailed https://www.atlassian.com/trust/report-abuse but nothing has happened yet. I’m afraid these users now have access to my information (like my password) but hopefully I caught it in time and I’m okay.

I am attaching a screenshot of what the email looked like, as well as the email address that sent me the spam invitation:

noreply+f1175fbf362c5a0a842066bc287036555ef9b34e1a03fbc83434d541@am.atlassian.com

Thank you! Please help me as soon as you can. I’ve been very anxious about this!

Kindly,

Accepted answers

Nic Brough -Adaptavist-

Welcome to the Atlassian Community!

No, the abusers only have your email address. If you don't engage with them in any way, then that's all they will ever have.

You didn't need to delete the account or change any details (although I would always recommend a password change if you ever have any doubts, or have not changed it for a few weeks).

It's a bit overkill to delete the account, but not a bad thing if you're not really using it, and it makes you feel safer. You've done absolutely the right thing in forwarding the email to the abuse team. They don't always respond, in my experience, but they will take down any site that is abusive like this, when they can (they're quite busy - abuse is not their only role)

All comments

Steve_5r34lc

I had some issues attaching the screenshot but it is finally attached!

Nic Brough -Adaptavist-

Welcome to the Atlassian Community!

No, the abusers only have your email address. If you don't engage with them in any way, then that's all they will ever have.

You didn't need to delete the account or change any details (although I would always recommend a password change if you ever have any doubts, or have not changed it for a few weeks).

Steve_5r34lc

Thank you so much for reassuring me that that’s all they have (email.) I also called Atlassian and spoke to a very kind rep that reassured me similarly.

I was not an Atlassian user before (didnt even know what atlassian was!) and foolishly created the account because I had created a helpdesk ticket with another company and thought that it was my invite to see the progress. I feel so dumb!

Yeah, I’m going to keep it deleted because it makes me feel safer. And I’m glad that I reported it to the proper email. I won’t expect a reply, but they have the emails now so I’ll just hope that they close the accounts of those abusers ASAP.

Best,

EANNA ESHI DE GUZMAN

Same there's someone I chat in telegram that I thought legit she offer me £40 per page total of £6200 once done.

Shide

How can I leave a Spam project? I don't want to have the project forever. Please let users remove from projects.

Nic Brough -Adaptavist-

You can not just remove yourself from projects, that would be a logistical and legal nightmare for a lot of organisations (a lot more than you think)

If the project/system is legitimate, then you need to ask the admins to remove you. In most cases, you'll find you were added by mistake, or a re-organisation (you moving jobs, their project re-jigging, whatever) didn't get it all right.

If it is a malicious system you should not have been "added" to, then get any email it has sent to you and forward it, unchanged and in full, to https://www.atlassian.com/trust/report-abuse . There is no need to add any explanation or information, literally just click "forward" in your email client and send it.

Ran Rubinstein_lavbuj

How is this still happening and no one at atlassian cares

unknown

Truth is Atlassian don't give a damn, they are perfectly happy to allow abuse and scams on their platform.

You can email https://www.atlassian.com/trust/report-abuse until your face turns blue, they will do nothing.

Shide

I'm resending all the emails that I receive to https://www.atlassian.com/trust/report-abuse. I hope they do something with those... I think I've resend around 10-20 since en of August...

unknown

I've also been added to someone else's site and was tagged in some random task.

I had to verify this by separately creating an Atlassian account with the email used

. Apparently, if you add a dot in the middle of your username, ie. john.doe@gmail.com, you'll receive the emails at johndoe@gmail.com.

I've forwarded those emails to https://www.atlassian.com/trust/report-abuse and deleted the Jira account. Hopefully, the site can be taken down.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira-service-management

unknown-hosting-type